CVE-2014-1934
eyeD3 is vulnerable to arbitrary file modification via symlink attack
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
Exploit likelihood
What each source reports
NVD Score used
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
CVE-2014-1934- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
CVE-2014-1934- Updated
- 2026-11-02
EUVDEUVD-2022-2435 No score
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
EUVD-2022-2435- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4r2w-w73w-36jm
eyeD3 is vulnerable to arbitrary file modification via symlink attack
tag.py in eyeD3 (aka python-eyed3) 0.7.5 and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
GHSA-4r2w-w73w-36jm- CVSS 3.1
- 4.5 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVGHSA-4r2w-w73w-36jm
eyeD3 is vulnerable to arbitrary file modification via symlink attack
tag.py in eyeD3 (aka python-eyed3) 0.7.5 and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
GHSA-4r2w-w73w-36jm- CVSS 3.1
- 4.5 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L - Weakness
- CWE-59
- Updated
- 2026-11-02
OSVPYSEC-2026-807
eyeD3 is vulnerable to arbitrary file modification via symlink attack
tag.py in eyeD3 (aka python-eyed3) 0.7.5 and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
PYSEC-2026-807- CVSS 3.1
- 4.5 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L - Updated
- 2026-11-02
Show 4 moreShow less
OSV No score
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
CVE-2014-1934- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1934 No score
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
DEBIAN-CVE-2014-1934- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10474-1 No score
python-eyeD3-0.7.4-3.3 on GA media
These are all security issues fixed in the python-eyeD3-0.7.4-3.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10474-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1934 No score
tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
- Record
UBUNTU-CVE-2014-1934- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
eyed3PyPI |
before 0.7.5 | 0.7.5 |
eyed3Debian:12 |
before 0.6.18-3 | 0.6.18-3 |
eyed3Debian:13 |
before 0.6.18-3 | 0.6.18-3 |
eyed3Debian:14 |
before 0.6.18-3 | 0.6.18-3 |
eyed3Ubuntu:16.04:LTS |
All versions, plus listed versions 0.6.18-1 |
None known |
python-eyeD3openSUSE:Tumbleweed |
before 0.7.4-3.3 | 0.7.4-3.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1934 is a low vulnerability (CVSS 3.3) in Travis Shirk Eyed3, published May 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in eyed3 0.7.5.