Secunia Security Advisory 11924 – Martin Michlmayr has reported a vulnerability in cplay allowing malicious, local users to perform certain actions with escalated privileges. A temporary file is created insecurely in a predictable location, which can be exploited via symlink attacks to corrupt the content of arbitrary files with the privileges of a user invoking cplay. The vulnerability has been reported in version 1.49. Prior versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33632/11924.txt
Source: https://packetstormsecurity.com/files/33632/11924.txt.html