NVD

Id
44952  
Name
CVE-2012-3355  
Description
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-17  
Modified Date
2012-09-07  
Seq
2012-3355  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225198 44952 CVE-2012-3355 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673  View
225199 44952 CVE-2012-3355 http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html  View
225200 44952 CVE-2012-3355 [oss-security] 20120625 CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for "Album", "Lyrics", and "Artist" tabs  View
225201 44952 CVE-2012-3355 [oss-security] 20120625 Re: CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for "Album", "Lyrics", and "Artist" tabs  View
225202 44952 CVE-2012-3355 54186  View
225203 44952 CVE-2012-3355 USN-1503-1  View
225204 44952 CVE-2012-3355 rhythmbox-template-symlink(76538)  View
225205 44952 CVE-2012-3355 https://bugzilla.gnome.org/show_bug.cgi?id=678661  View
225206 44952 CVE-2012-3355 https://bugzilla.redhat.com/show_bug.cgi?id=835076  View
225207 44952 CVE-2012-3355 openSUSE-SU-2012:0954  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27437 JVNDB-2012-003144 GNOME Rhythmbox の Context モジュールにおける任意のコードを実行される脆弱性 GNOME Rhythmbox の Context モジュールの (1) AlbumTab.py、(2) ArtistTab.py、(3) LinksTab.py、および (4) LyricsTab.py には、任意のコードを実行される脆弱性が存在します。 CVE-2012-3355 56593 CVE-2012-3355 44952 3.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003144.html 2012-07-17 2012-09-14 View