CVE-2014-4978

The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-graph.

• CWE-59

• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162109.htmlIssue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/07/16/15Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/68671Third Party Advisory, VDB Entry
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754899Issue Tracking, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1120093Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94633Third Party Advisory, VDB Entry
• https://github.com/rawstudio/rawstudio/commit/9c2cd3c93c05d009a91d84eedbb85873b0cb505dIssue Tracking, Patch, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162109.htmlIssue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/07/16/15Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/68671Third Party Advisory, VDB Entry
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754899Issue Tracking, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1120093Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94633Third Party Advisory, VDB Entry
• https://github.com/rawstudio/rawstudio/commit/9c2cd3c93c05d009a91d84eedbb85873b0cb505dIssue Tracking, Patch, Third Party Advisory

Published

Dec 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4972Unrestricted file upload vulnerability in the Gravity Upload…
• CVE-2014-4973The ESET Personal Firewall NDIS filter (EpFwNdis.sys) driver…
• CVE-2014-4974The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel…
• CVE-2014-4975Off-by-one error in the encodes function in pack.c in Ruby 1…
• CVE-2014-4976Dell SonicWall Scrutinizer 11.0.1 allows remote authenticate…
• CVE-2014-4977Multiple SQL injection vulnerabilities in Dell SonicWall Scr…
• CVE-2014-4979Apple QuickTime allows remote attackers to execute arbitrary…
• CVE-2014-4980The /server/properties resource in Tenable Web UI before 2.3…
• CVE-2014-4981LPAR2RRD in 3.5 and earlier allows remote attackers to execu…9.8
• CVE-2014-4982LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on…9.8
• CVE-2014-4984Déjà Vu Crescendo Sales CRM has remote SQL Injection9.8
• CVE-2014-4986Multiple cross-site scripting (XSS) vulnerabilities in js/fu…