CVE:CVE-2011-4606
CNNVD:CNNVD-201112-256
Artsoft Entertainment Rocks'n'Diamonds (也称为rocksndiamonds) 3.3.0.1版本中存在漏洞。本地用户可以借助用户主目录下的.rocksndiamonds/cache/artworkinfo.cache上的符号链接攻击覆盖任意文件。
solution:Upgrade artsoft rocks'n'diamonds to a higher version than 3.3.0.1,and avoid the version 3.3.0.1