Secunia

Viktor Griph has reported a security issue in Audacity, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to delete arbitrary files and directories.

The security issue is caused due to the "AudacityApp::OnInit()" method in src/AudacityApp.cpp handling temporary files in an insecure manner. This can be exploited to delete arbitrary files and directories via symlink attacks, or to cause a deadlock.

The security issue is reported in version 1.3.2. Other versions may also be affected.

Solution
Fixed in version 1.3.5 (audacity-unstable).
Further details available in Customer Area

Provided and/or discovered by
Viktor Griph

Changelog
Further details available in Customer Area

Original Advisory
Audacity:
http://sourceforge.net/project/shownotes.php?release_id=597859

http://bugs.gentoo.org/show_bug.cgi?id=199751

Deep Links
Links available in Customer Area