Unrated severityNVD Advisory· Published Feb 20, 2007· Updated Jun 16, 2026

CVE-2007-0007

Description

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] temporary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gnucash/Gnucash2 versions
cpe:2.3:a:gnucash:gnucash:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnucash:gnucash:*:*:*:*:*:*:*:*range: <=2.0.4
- (no CPE)range: <=2.0.4
osv-coords
pkg:rpm/opensuse/gnucash&distro=openSUSE%20Tumbleweed
Range: < 4.6-1.3

Patches

Vulnerability mechanics

References

secunia.com/advisories/24225nvdPatchVendor Advisory
bugzilla.redhat.com/bugzilla/show_bug.cginvdVendor Advisory
fedoranews.org/cms/node/2725nvd
secunia.com/advisories/24226nvd
secunia.com/advisories/24317nvd
sourceforge.net/project/shownotes.phpnvd
www.mandriva.com/security/advisoriesnvd
www.securityfocus.com/bid/22610nvd
www.vupen.com/english/advisories/2007/0653nvd
exchange.xforce.ibmcloud.com/vulnerabilities/32558nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000