Every CVE Search/ Get API key

CVE-2008-4964

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack...

6.9 MediumFix available

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Exploit likelihood

0.39%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Record
CVE-2008-4964
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Record
CVE-2008-4964
Updated
2026-11-02
EUVDEUVD-2008-4943 No score

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Record
EUVD-2008-4943
Updated
2026-11-03
GitHub AdvisoriesGHSA-552w-74vw-6jf7 No score

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack...

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Record
GHSA-552w-74vw-6jf7
Weakness
CWE-59
Updated
2026-11-02
OSV No score

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Record
CVE-2008-4964
Updated
2026-11-02
OSVDEBIAN-CVE-2008-4964 No score

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.

Record
DEBIAN-CVE-2008-4964
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
konwert
Debian:12
before 1.8-11.2
1.8-11.2
konwert
Debian:13
before 1.8-11.2
1.8-11.2
konwert
Debian:14
before 1.8-11.2
1.8-11.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4964 is a medium vulnerability (CVSS 6.9) in Krzysztof Kozlowski Konwert, published November 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in konwert 1.8-11.2.

References

Show 4 moreShow less
MoveEnter Open