w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file. NOTE: some of these details are obtained from third party information.
http://www.securityfocus.com/bid/28049
http://www.debian.org/security/2008/dsa-1526
http://secunia.com/advisories/29452