CVE-2020-11867

3.3

LOWCVSS v3

Published

November 30, 2020

CVSS v2

2.1 LOW

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.

audacity/audacity

GitHubAudio Editor

<= 2.3.3NVD

Audacity

ChocolateyAudacity is free, open source, cross-platform software for recording and editing sounds. ## Features - Record live audio. - Convert tapes and records into digital recordings or CDs. - Edit Ogg Vorbis, MP3, WAV or AIFF sound files. - Cut, copy, splice or mix sounds together. - Change the speed or pitch of a recording. - Add new effects with LADSPA plug-ins. - And more! See [full list of features](https://www.audacityteam.org/about/features). ## Notes **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**