Description
winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file.
References
- 33474 vdb-entry
- SUSE-SR:2009:004 vendor-advisory
- http://code.google.com/p/winezeug/source/detail?r=253
- winetricks-xshowmenu-symlink(48320) vdb-entry
- 51619 vdb-entry