Vulnerability in Ubiquity Slideshow Team Ubiquity-Slideshow-Ubuntu
CVE-2012-0956
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the <a> tag of a Twitter feed.
EPSS: 0.012 (65.0th percentile) — read the EPSS interpretation.
Affected products
- Ubiquity_slideshow_team Ubiquity-slideshow-ubuntu — versions 49, 52, 53
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
- security@ubuntu.com (x_refsource_CONFIRM)