NVD

Id
44975  
Name
CVE-2012-3378  
Description
The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in /tmp/at-spi2.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-31  
Modified Date
2012-09-05  
Seq
2012-3378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225363 44975 CVE-2012-3378 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678026  View
225364 44975 CVE-2012-3378 [oss-security] 20120705 Three CVE requests: at-spi2-atk, as31, naxsi  View
225365 44975 CVE-2012-3378 [oss-security] 20120706 Re: Three CVE requests: at-spi2-atk, as31, naxsi  View
225366 44975 CVE-2012-3378 https://bugzilla.gnome.org/show_bug.cgi?id=678348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28326 JVNDB-2012-004033 GNOME at-spi2-atk の atk-adaptor/bridge.c におけるファイルを生成または削除される脆弱性 GNOME at-spi2-atk の atk-adaptor/bridge.c の register_application 関数は、乱数発生プログラムを用いずに予測可能な一時ファイル名を生成するため、ファイルを生成または削除される脆弱性が存在します。 CVE-2012-3378 56616 CVE-2012-3378 44975 3.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004033.html 2012-08-31 2012-09-05 View