CVE-2011-0702

CVE-2011-0702 describes a local privilege escalation vulnerability in feh before version 1.11.2, specifically within the feh_unique_filename function. An attacker could exploit this by creating a symbolic link to an arbitrary file, allowing them to overwrite that file when feh attempts to create a temporary file in /tmp. With a CVSS score of 3.3, this vulnerability has a low severity, requiring local access and medium attack complexity to achieve partial integrity and availability impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old flaw.