Filtered by vendor Synaesthesia
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2005-0070 | 1 Synaesthesia | 1 Synaesthesia | 2024-02-28 | 7.2 HIGH | N/A |
Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files. | |||||
CVE-2004-0160 | 1 Synaesthesia | 1 Synaesthesia | 2024-02-28 | 7.2 HIGH | N/A |
Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file. |