CVE-2010-4338
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
Exploit likelihood
What each source reports
NVD Score used
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
CVE-2010-4338- CVSS 2.0
- 6.2 Medium
AV:L/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
CVE-2010-4338- Updated
- 2026-11-02
EUVDEUVD-2022-2628 No score
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
EUVD-2022-2628- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5pjj-7m4p-wfh2 No score
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
GHSA-5pjj-7m4p-wfh2- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
CVE-2010-4338- Updated
- 2026-11-02
OSVGHSA-5pjj-7m4p-wfh2 No score
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
GHSA-5pjj-7m4p-wfh2- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVPYSEC-2026-886 No score
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
- Record
PYSEC-2026-886- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4338 is a medium vulnerability (CVSS 6.2) in Jwilk Ocrodjvu, published January 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in ocrodjvu 0.4.6-2.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=598134
securityfocus.com/bid/45234
exchange.xforce.ibmcloud.com/vulnerabilities/64892
nvd.nist.gov/vuln/detail/CVE-2010-4338
web.archive.org/web/20200229160520/http://www.securityfocus.com/bid/45234
github.com/advisories/GHSA-5pjj-7m4p-wfh2
pypi.org/project/ocrodjvu