CVE-2007-6061: Audacityteam Audacity

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Affected products

• Audacityteam Audacity: version 1.3.2 only

Published 2007-11-20. Last modified 2026-06-16.