Unscored severity · published Jul 17, 2012
CVE-2012-3355
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code…
–
CVSS
0.6%
EPSS
No
On KEV
Description
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Rhythmbox · Gnome
through 0.13.3; 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.5.4; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3355
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3355
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673
people.canonical.com
http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/06/25/5
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/06/25/7
www.securityfocus.com
http://www.securityfocus.com/bid/54186
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1503-1
More from Rhythmbox
–
CVE-2008-7185
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to…