CVE-2014-0027: Low severity cmu Flite vulnerability
It was found that flite, a speech synthesis engine (text-to-speech), insecurely used a temporary file. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running flite, or possibly obtain sensitive information as the temporary file may contain text-to-speech output (screen contents).
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
Other sources
The playwavefromsocket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0027?
CVE-2014-0027 has been classified as a moderate severity vulnerability.
How do I fix CVE-2014-0027?
To fix CVE-2014-0027, upgrade to flite version 1.4 or later where the vulnerability is addressed.
Who is affected by CVE-2014-0027?
Users of flite version 1.4 are affected by CVE-2014-0027.
Can CVE-2014-0027 be exploited remotely?
No, CVE-2014-0027 can only be exploited by a local attacker.
What types of attacks can CVE-2014-0027 facilitate?
CVE-2014-0027 can facilitate symbolic link attacks to modify arbitrary files or expose sensitive information.