CVE-2011-4328

Published: 16 June 2012

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.

Priority

Status

Package	Release	Status
gnash Launchpad, Ubuntu, Debian	Upstream	Released (0.8.10-1)





	Ubuntu 14.04 ESM (Trusty Tahr)	Released (0.8.10-3ubuntu1)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4328
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM