Vendor/product archive

gnu / gnash CVEs

Beta · best-effort

3 CVEs tagged to gnu / gnash — 0 Critical, 0 High, 2 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to gnu vendor archive

CVE-2012-1175

Published Aug 26, 2012

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2011-4328

Published Jun 16, 2012

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-4337

Published Jan 14, 2011

The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnin…

CVSS 3.3 · Low

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1