Approved changes feed: RSS · Atom

cpe:2.3:a:audacityteam:audacity:1.3.2:*:*:*:*:*:*:*

part: a version: 1.3.2 update: *

VendorAudacityteam (58e6c279-5065-5b75-ab3d-4bf5b48af15e)
ProductAudacity (b091bb5b-7dbc-5a91-b119-1eabee1cfb02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/audacity purl2cpe 2026-06-01 10:16:15.832559
pkg:deb/ubuntu/audacity purl2cpe 2026-06-01 10:16:15.832560
pkg:github/audacity/audacity purl2cpe 2026-06-01 10:16:15.832562
pkg:rpm/fedora/audacity purl2cpe 2026-06-01 10:16:15.832564
pkg:rpm/opensuse/audacity purl2cpe 2026-06-01 10:16:15.832566

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6061 vulnerable 2026-06-08 04:50:07.577775 Details available
Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.
Published: 2007-11-20T23:00:00.000Z
Updated: 2024-08-07T15:54:26.418Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.