CVE-2011-4328

Publication date 16 June 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
gnash 13.10 saucy
Fixed 0.8.10-3ubuntu1
13.04 raring
Fixed 0.8.10-3ubuntu1
12.10 quantal
Fixed 0.8.10-3ubuntu1
12.04 LTS precise
Fixed 0.8.10-3ubuntu1
11.10 oneiric Ignored end of life
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life