Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere.
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.
Link | Tags |
---|---|
https://git.zx2c4.com/calibre-mount-helper-exploit/about/ | third party advisory exploit |
https://www.openwall.com/lists/oss-security/2011/11/02/2 | third party advisory mailing list |
https://bugs.launchpad.net/calibre/+bug/885027 | third party advisory issue tracking exploit |
https://lwn.net/Articles/464824/ | third party advisory not applicable |