Unscored severity · published Oct 1, 2012
CVE-2012-4427
The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page
–
CVSS
1.3%
EPSS
No
On KEV
Description
The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnome-shell · Gnome
3.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4427
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4427
Exploit
http://www.openwall.com/lists/oss-security/2012/09/08/1
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/09/13/19
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/09/13/26
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/09/18/3
www.securityfocus.com
http://www.securityfocus.com/bid/55556
Vendor Advisory
https://bugzilla.gnome.org/show_bug.cgi?id=684215
More from Gnome-shell
8.1
CVE-2017-8288
gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen
6.1
CVE-2021-20315
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are…
5.5
CVE-2023-43090
A vulnerability was found in GNOME Shell
5.5
CVE-2021-3982
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue
4.3
CVE-2020-17489
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4