QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3355

Published: Jul 17, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugzilla.gnome.org/show_bug.cgi?id=678661

x_refsource_MISC

[oss-security] 20120625 CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs

mailing-list

x_refsource_MLIST

openSUSE-SU-2012:0954

vendor-advisory

x_refsource_SUSE

[oss-security] 20120625 Re: CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html

x_refsource_MISC

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673

x_refsource_MISC

vendor-advisory

x_refsource_UBUNTU

rhythmbox-template-symlink(76538)

vdb-entry

x_refsource_XF

https://bugzilla.redhat.com/show_bug.cgi?id=835076

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.