Published: 16/06/2012 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

plugin/npapi/plugin.cpp in Gnash prior to 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu gnash 0.8.7
gnu gnash 0.8.9
gnu gnash
gnu gnash 0.8.5
gnu gnash 0.8.8

Several vulnerabilities have been identified in Gnash, the GNU Flash player CVE-2012-1175 Tielei Wang from Georgia Tech Information Security Center discovered a vulnerability in GNU Gnash which is caused due to an integer overflow error and can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially ...

Debian Bug report logs - #649384 gnash creates world-readable cookies under /tmp with predictable filenames Package: gnash; Maintainer for gnash is Debian Flash Team <pkg-flash-devel@listsaliothdebianorg>; Source for gnash is src:gnash (PTS, buildd, popcon) Reported by: Alexander Kurtz <kurtzalex@googlemailcom> ...

Debian Bug report logs - #605419 CVE-2010-4337 gnash: configure creates temp files insecurely Package: src:gnash; Maintainer for src:gnash is Debian Flash Team <pkg-flash-devel@listsaliothdebianorg>; Reported by: Jakub Wilk <jwilk@debianorg> Date: Mon, 29 Nov 2010 20:09:01 UTC Severity: normal Tags: security, squ ...

Debian Bug report logs - #664023 [CVE-2012-1175] gnash integer overflow Package: gnash; Maintainer for gnash is Debian Flash Team <pkg-flash-devel@listsaliothdebianorg>; Source for gnash is src:gnash (PTS, buildd, popcon) Reported by: Luciano Bello <luciano@debianorg> Date: Wed, 14 Mar 2012 22:27:16 UTC Severity ...

CWE-264 http://www.openwall.com/lists/oss-security/2011/11/21/7 http://www.securityfocus.com/bid/50747 http://www.debian.org/security/2012/dsa-2435 http://secunia.com/advisories/48325 http://lists.opensuse.org/opensuse-updates/2012-03/msg00003.html http://www.osvdb.org/77243 http://secunia.com/advisories/48466 http://lists.opensuse.org/opensuse-updates/2012-03/msg00026.html http://www.openwall.com/lists/oss-security/2011/11/21/12 https://bugzilla.redhat.com/show_bug.cgi?id=755518 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384 http://git.savannah.gnu.org/gitweb/?p=gnash.git%3Ba=commitdiff%3Bh=fa481c116e65ccf9137c7ddc8abc3cf05dc12f55 https://nvd.nist.gov https://www.debian.org/security/./dsa-2435

CVE-2011-4328

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect