CVE-2007-6131
CVE-2007-6131 is a low-severity vulnerability in Redhat Fedora Core with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-16.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 0% (33rd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-16
- Affected product: Redhat Fedora Core
- Published:
- Last modified:
Description
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files.
Frequently asked questions
- What is CVE-2007-6131?
- buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files.
- How severe is CVE-2007-6131?
- CVE-2007-6131 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2007-6131 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (33rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-6131?
- CVE-2007-6131 affects Redhat Fedora Core. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2007-6131?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-6131 published?
- CVE-2007-6131 was published on 2007-11-26 and last updated on 2026-06-16.
References
- http://osvdb.org/42422
- http://secunia.com/advisories/27847
- http://securitytracker.com/id?1019007
- http://www.securityfocus.com/bid/26617
- http://www.vupen.com/english/advisories/2007/4024
- https://bugzilla.redhat.com/show_bug.cgi?id=383131
Affected products (1)
- cpe:2.3:o:redhat:fedora_core:f7:*:*:*:*:*:*:*
More vulnerabilities in Redhat Fedora Core
- CVE-2006-6235 — Critical (CVSS 10.0): A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows…
- CVE-2005-3625 — Critical (CVSS 10.0): Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows…
- CVE-2004-0989 — Critical (CVSS 10.0): Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote…
- CVE-2004-0888 — Critical (CVSS 10.0): Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and…
- CVE-2004-0902 — Critical (CVSS 10.0): Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and…
- CVE-2004-0903 — Critical (CVSS 10.0): Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview…
All CVEs affecting Redhat Fedora Core →
Other CWE-16 vulnerabilities
- CVE-2013-4316 — Critical (CVSS 10.0): Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack…
- CVE-2013-1221 — Critical (CVSS 10.0): The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not…
- CVE-2011-4501 — Critical (CVSS 10.0): The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg,…
- CVE-2010-4586 — Critical (CVSS 10.0): The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and…
- CVE-2010-2977 — Critical (CVSS 10.0): Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has…
- CVE-2010-2276 — Critical (CVSS 10.0): The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2,…