Gnu

Gnash

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2012-1175

  • EPSS 3.57%
  • Published 26.08.2012 20:55:00
  • Last modified 11.04.2025 00:51:21

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer ov...

5

CVE-2011-4328

  • EPSS 0.44%
  • Published 16.06.2012 00:55:05
  • Last modified 11.04.2025 00:51:21

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.

3.3

CVE-2010-4337

  • EPSS 0.03%
  • Published 14.01.2011 23:00:47
  • Last modified 11.04.2025 00:51:21

The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnings.$$, or (3) /tmp/gnash-configure-recommended.$$ files.