tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.
CVSS 2.0LOW 3.3·Local·No auth·Interaction —·EPSS 0.00343·Published 2014-05-08·Fixed in 0.7.5CWE-59
