CVE-2005-3349: GNU GNUMP3D

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.

Affected products

• GNU GNUMP3D: up to and including 2.9.7; version 2.9 only; version 2.9.1 only; version 2.9.2 only; version 2.9.3 only; version 2.9.4 only; …

Published 2005-11-18. Last modified 2026-06-16.