Every CVESearch/Get API key

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for...

5.0 MediumFix available

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Exploit likelihood

3.41%Up 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
CVE-2007-6061
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE ListNo score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
CVE-2007-6061
Updated
2026-11-02
EUVDEUVD-2007-6031No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
EUVD-2007-6031
Updated
2026-11-03
GitHub AdvisoriesGHSA-3pxp-pwrp-2w6fNo score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for...

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
GHSA-3pxp-pwrp-2w6f
Weakness
CWE-59
Updated
2026-11-02
OSVNo score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
CVE-2007-6061
Updated
2026-11-02
OSVDEBIAN-CVE-2007-6061No score

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Record
DEBIAN-CVE-2007-6061
Updated
2026-11-02
OSVopenSUSE-SU-2024:10639-1No score

audacity-3.0.4-1.2 on GA media

These are all security issues fixed in the audacity-3.0.4-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10639-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
audacity
Debian:12
before 1.3.4-1.1
1.3.4-1.1
audacity
Debian:13
before 1.3.4-1.1
1.3.4-1.1
audacity
Debian:14
before 1.3.4-1.1
1.3.4-1.1
audacity
openSUSE:Tumbleweed
before 3.0.4-1.2
3.0.4-1.2

History

History
RecordedChangedSources
facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6061 is a medium vulnerability (CVSS 5.0) in Audacityteam Audacity, published November 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.41%, the 89th percentile. Fixed in audacity 1.3.4-1.1.

References

Show 8 moreShow less
MoveEnter Open