6.8
CVE-2012-0956
- EPSS 1.2%
- Veröffentlicht 28.09.2012 15:55:00
- Zuletzt bearbeitet 16.06.2026 23:38:34
- Quelle security@ubuntu.com
- CVE-Watchlists
- Unerledigt
Loginubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the <a> tag of a Twitter feed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version <= 58.1
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version49
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version52
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version53
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version54
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version55
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version56
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version57
Ubiquity Slideshow Team ≫ Ubiquity-slideshow-ubuntu Version58
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.2% | 0.642 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://www.ubuntu.com/usn/USN-1561-1
https://bugs.launchpad.net/ubuntu/%2Bsource/ubiquity-slideshow-ubuntu/%2Bbug/991982