Description
The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.
References
- [oss-security] 20140416 CVE request: insecure temporary file handling in clang's scan-build utility mailing-list
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744817
- openSUSE-SU-2015:0245 vendor-advisory
- [oss-security] 20140420 Re: Bug#744817: CVE request: insecure temporary file handling in clang's scan-build utility mailing-list