CVE-2007-3531

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-25 · updated 2026-06-16

Description

The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.

Affected products

gentoo Nvclock: through 0.7

References

http://bugs.gentoo.org/show_bug.cgi?id=184071
http://osvdb.org/38573
http://secunia.com/advisories/26200
http://secunia.com/advisories/26208
http://security.gentoo.org/glsa/glsa-200707-08.xml
http://www.securityfocus.com/bid/25052
https://exchange.xforce.ibmcloud.com/vulnerabilities/35584
http://bugs.gentoo.org/show_bug.cgi?id=184071
http://osvdb.org/38573
http://secunia.com/advisories/26200
http://secunia.com/advisories/26208
http://security.gentoo.org/glsa/glsa-200707-08.xml

Get alerted when CVE-2007-3531 or the next vulnerability affects your stack