Unscored DSA-2435-1 3 CVEs

gnash - several

Published Mar 19, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	gnash	0.8.8-5+squeeze1

Vulnerabilities 3

Unscored —

CVE-2010-4337

The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tm…

Jan 14, 2011
Unscored —

CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable…

Jun 16, 2012
Unscored —

CVE-2012-1175

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to …

Aug 26, 2012