This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2011-1136 →
DEBIAN-CVE-2011-1136
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.
Original description
The description as published by the source.
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-2.1"}]}]
Debian:13
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-2.1"}]}]
Debian:14
tesseract
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-2.1"}]}]
References
- advisory security-tracker.debian.org