CVE-2009-0313

Common Vulnerabilities and Exposures

winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file.

Novell Bugzilla entry: 467620

SUSE Security Advisories:

Product(s)	Fixed package version(s)	References
openSUSE 11.0	`wine-debuginfo >= 0.9.64_aka_1.0.rc3-2.2` `wine-debugsource >= 0.9.64_aka_1.0.rc3-2.2`	SAT Patch Nr: 484
openSUSE 11.0	`wine >= 0.9.64_aka_1.0.rc3-2.2` `wine-devel >= 0.9.64_aka_1.0.rc3-2.2`	SAT Patch Nr: 484
openSUSE 11.1	`wine-debuginfo >= 1.1.9-1.11.1` `wine-debugsource >= 1.1.9-1.11.1`	SAT Patch Nr: 484
openSUSE 11.1	`wine >= 1.1.9-1.11.1` `wine-devel >= 1.1.9-1.11.1`	SAT Patch Nr: 484