The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg.
| Software | From | Fixed in |
|---|---|---|
| fedoraproject / fedora | 17 | 17.x |
| fedoraproject / fedora | 18 | 18.x |