Every CVE Search/ Get API key

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for...

5.0 MediumFix available

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Exploit likelihood

3.41%Up 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
CVE-2007-6061
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
CVE-2007-6061
Updated
2026-11-02
EUVDEUVD-2007-6031 No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
EUVD-2007-6031
Updated
2026-11-03
GitHub AdvisoriesGHSA-3pxp-pwrp-2w6f No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for...

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
GHSA-3pxp-pwrp-2w6f
Weakness
CWE-59
Updated
2026-11-02
OSV No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
CVE-2007-6061
Updated
2026-11-02
OSVDEBIAN-CVE-2007-6061 No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
DEBIAN-CVE-2007-6061
Updated
2026-11-02
OSVopenSUSE-SU-2024:10639-1 No score

audacity-3.0.4-1.2 on GA media

These are all security issues fixed in the audacity-3.0.4-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10639-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
audacity
Debian:12
before 1.3.4-1.1
1.3.4-1.1
audacity
Debian:13
before 1.3.4-1.1
1.3.4-1.1
audacity
Debian:14
before 1.3.4-1.1
1.3.4-1.1
audacity
openSUSE:Tumbleweed
before 3.0.4-1.2
3.0.4-1.2

History

History
RecordedChangedSources
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6061 is a medium vulnerability (CVSS 5.0) in Audacityteam Audacity, published November 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.41%, the 88th percentile. Fixed in audacity 1.3.4-1.1.

References

Show 8 moreShow less
MoveEnter Open