CVE-1999-1439
LowExploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
Risk Assessment
An attacker could exploit this vulnerability to modify or delete critical files, potentially leading to data loss or system instability.
Recommendation
It is recommended to upgrade to a newer version of gcc that addresses this vulnerability and to implement appropriate protections against symlink attacks.
Other vulnerabilities in gcc 2.7.2
See all- CVE-2026-102010High
A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.
- CVE-2021-46195Medium
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.
Original NVD description (English source)
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS