CVE

Id
56598  
CVE No.
CVE-2012-3355  
Status
Candidate  
Description
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.  
Phase
Assigned (20120614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
585858 56598 CVE-2012-3355 MLIST:[oss-security] 20120625 CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for "Album", "Lyrics", and "Artist" tabs  View
585859 56598 CVE-2012-3355 URL:http://www.openwall.com/lists/oss-security/2012/06/25/5  View
585860 56598 CVE-2012-3355 MLIST:[oss-security] 20120625 Re: CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for "Album", "Lyrics", and "Artist" tabs  View
585861 56598 CVE-2012-3355 URL:http://www.openwall.com/lists/oss-security/2012/06/25/7  View
585862 56598 CVE-2012-3355 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673  View
585863 56598 CVE-2012-3355 MISC:http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html  View
585864 56598 CVE-2012-3355 MISC:https://bugzilla.gnome.org/show_bug.cgi?id=678661  View
585865 56598 CVE-2012-3355 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=835076  View
585866 56598 CVE-2012-3355 SUSE:openSUSE-SU-2012:0954  View
585867 56598 CVE-2012-3355 URL:https://hermes.opensuse.org/messages/15351848  View
585868 56598 CVE-2012-3355 UBUNTU:USN-1503-1  View
585869 56598 CVE-2012-3355 URL:http://www.ubuntu.com/usn/USN-1503-1  View
585870 56598 CVE-2012-3355 BID:54186  View
585871 56598 CVE-2012-3355 URL:http://www.securityfocus.com/bid/54186  View
585872 56598 CVE-2012-3355 XF:rhythmbox-template-symlink(76538)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27562 JVNDB-2012-003269 OpenStack Compute (Nova) Folsom および Essex におけるディレクトリトラバーサルの脆弱性 OpenStack Compute (Nova) Folsom (2012.2) および Essex (2012.1) の virt/disk/api.py には、libvirt ベースのハイパーバイザー上で使用される場合、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2012-3360 56598 5.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003269.html  View