Vulnerability in GNU Gnash

CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.

EPSS: 0.021 (80.1th percentile) — read the EPSS interpretation.

Affected products

  • Gnu Gnash — versions 0.8.5, 0.8.7, 0.8.8
  • N/a — versions n/a

Weakness classification (CWE)

References