{"id":"CVE-2010-4338","aliases":["GHSA-5pjj-7m4p-wfh2","PYSEC-2026-886"],"url":"https://o3.security/vulnerability/CVE-2010-4338","summary":"ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack","details":"ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.","published":"2011-01-20T19:00:06Z","modified":"2026-07-07T11:56:42.949788547Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Debian:10","name":"ocrodjvu","fixedVersion":"0.4.6-2"}],"fix":null,"references":[{"type":"WEB","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598134"},{"type":"WEB","url":"http://www.securityfocus.com/bid/45234"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64892"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-07T11:56:42.949788547Z"}}