Showing 1 - 1 of 1

CVE-2012-3355

Status Candidate

Overview

(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.

Related Files

Ubuntu Security Notice USN-1503-1: Posted Jul 12, 2012; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 1503-1 - Hans Spaans discovered that the Context plugin in Rhythmbox created a temporary directory in an insecure manner. A local attacker could exploit this to execute arbitrary code as the user invoking the program. The Context plugin is disabled by default in Ubuntu.; tags | advisory, arbitrary, local; systems | linux, ubuntu; advisories | CVE-2012-3355; SHA-256 | df547307b999909e8ad311c8eb23837293bda1c1769f52bf417f2bfd35e2b199; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 252 files
Ubuntu 107 files
indoushka 20 files
Debian 19 files
Gentoo 14 files
Google Security Research 13 files
CraCkEr 11 files
Mirabbas Agalarov 9 files
nu11secur1ty 8 files
Apple 8 files

File Archives

Systems

AIX (428)
Apple (1,979)
BSD (373)
CentOS (57)
Cisco (1,920)
Debian (6,754)
Fedora (1,691)
FreeBSD (1,244)
Gentoo (4,321)
HPUX (879)
iOS (344)
iPhone (108)
IRIX (220)
Juniper (67)
Linux (45,838)
Mac OS X (685)
Mandriva (3,105)
NetBSD (256)
OpenBSD (482)
RedHat (13,356)
Slackware (941)
Solaris (1,610)
SUSE (1,444)
Ubuntu (8,642)
UNIX (9,244)
UnixWare (186)
Windows (6,555)
Other

CVE-2012-3355

Overview

Related Files

File Archive:

June 2023

Top Authors In Last 30 Days

File Tags

File Archives

Systems