Approved changes feed: RSS · Atom

cpe:2.3:a:gummi_project:gummi:0.6.5:*:*:*:*:*:*:*

part: a version: 0.6.5 update: *

VendorGummi Project (180dd84d-cda9-5870-ad62-220a428bea15)
ProductGummi (7567b8af-961c-55ba-a815-d04091deafcb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gummi purl2cpe 2026-06-01 10:13:43.395451
pkg:deb/ubuntu/gummi purl2cpe 2026-06-01 10:13:43.395454
pkg:github/alexandervdm/gummi purl2cpe 2026-06-01 10:13:43.395457
pkg:rpm/fedora/gummi purl2cpe 2026-06-01 10:13:43.395460
pkg:rpm/opensuse/gummi purl2cpe 2026-06-01 10:13:43.395462

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7758 vulnerable 2026-06-08 05:07:01.840022 Details available
Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .toc extension for the file name, as demonstrated by .thesis.tex.aux.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-08-06T07:58:59.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.