CVE-2012-3355 (1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack o...
LowCVSS 3.6
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/rhythmbox(Debian:12) | < 2.97-2.1 | 2.97-2.1 |
| debian/rhythmbox(Debian:13) | < 2.97-2.1 | 2.97-2.1 |
| debian/rhythmbox(Debian:14) | < 2.97-2.1 | 2.97-2.1 |
| GNOME rhythmbox | <= 0.13.3 | No fix listed |
| GNOME rhythmbox | = 0.5.0 | No fix listed |
| GNOME rhythmbox | = 0.5.1 | No fix listed |
| GNOME rhythmbox | = 0.5.2 | No fix listed |
| GNOME rhythmbox | = 0.5.3 | No fix listed |
| GNOME rhythmbox | = 0.5.4 | No fix listed |
| GNOME rhythmbox | = 0.5.88 | No fix listed |
| GNOME rhythmbox | = 0.6.0 | No fix listed |
| GNOME rhythmbox | = 0.6.1 | No fix listed |
| GNOME rhythmbox | = 0.6.2 | No fix listed |
| GNOME rhythmbox | = 0.6.3 | No fix listed |
| GNOME rhythmbox | = 0.6.4 | No fix listed |
| GNOME rhythmbox | = 0.6.5 | No fix listed |
| GNOME rhythmbox | = 0.6.6 | No fix listed |
| GNOME rhythmbox | = 0.6.7 | No fix listed |
| GNOME rhythmbox | = 0.6.8 | No fix listed |
| GNOME rhythmbox | = 0.7.0 | No fix listed |
| GNOME rhythmbox | = 0.7.1 | No fix listed |
| GNOME rhythmbox | = 0.7.2 | No fix listed |
| GNOME rhythmbox | = 0.8.0 | No fix listed |
| GNOME rhythmbox | = 0.8.1 | No fix listed |
| GNOME rhythmbox | = 0.8.2 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME rhythmbox | = 0.8.3 | No fix listed |
| GNOME rhythmbox | = 0.8.4 | No fix listed |
| GNOME rhythmbox | = 0.8.5 | No fix listed |
| GNOME rhythmbox | = 0.8.6 | No fix listed |
| GNOME rhythmbox | = 0.8.7 | No fix listed |
| GNOME rhythmbox | = 0.8.8 | No fix listed |
| GNOME rhythmbox | = 0.9.0 | No fix listed |
| GNOME rhythmbox | = 0.9.1 | No fix listed |
| GNOME rhythmbox | = 0.9.2 | No fix listed |
| GNOME rhythmbox | = 0.9.3 | No fix listed |
| GNOME rhythmbox | = 0.9.3.1 | No fix listed |
| GNOME rhythmbox | = 0.9.4 | No fix listed |
| GNOME rhythmbox | = 0.9.4.1 | No fix listed |
| GNOME rhythmbox | = 0.9.5 | No fix listed |
| GNOME rhythmbox | = 0.9.6 | No fix listed |
| GNOME rhythmbox | = 0.9.6.90 | No fix listed |
| GNOME rhythmbox | = 0.9.7 | No fix listed |
| GNOME rhythmbox | = 0.9.8 | No fix listed |
| GNOME rhythmbox | = 0.10.0 | No fix listed |
| GNOME rhythmbox | = 0.10.0.90 | No fix listed |
| GNOME rhythmbox | = 0.10.1 | No fix listed |
| GNOME rhythmbox | = 0.11.0 | No fix listed |
| GNOME rhythmbox | = 0.11.1 | No fix listed |
| GNOME rhythmbox | = 0.11.2 | No fix listed |
| GNOME rhythmbox | = 0.11.3 | No fix listed |
| GNOME rhythmbox | = 0.11.4 | No fix listed |
| GNOME rhythmbox | = 0.11.5 | No fix listed |
| GNOME rhythmbox | = 0.11.6 | No fix listed |
| GNOME rhythmbox | = 0.12.0 | No fix listed |
| GNOME rhythmbox | = 0.12.1 | No fix listed |
| GNOME rhythmbox | = 0.12.2 | No fix listed |
| GNOME rhythmbox | = 0.12.3 | No fix listed |
| GNOME rhythmbox | = 0.12.4 | No fix listed |
| GNOME rhythmbox | = 0.12.5 | No fix listed |
| GNOME rhythmbox | = 0.12.6 | No fix listed |
| GNOME rhythmbox | = 0.12.7 | No fix listed |
| GNOME rhythmbox | = 0.12.8 | No fix listed |
| GNOME rhythmbox | = 0.13.0 | No fix listed |
| GNOME rhythmbox | = 0.13.1 | No fix listed |
| GNOME rhythmbox | = 0.13.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-3355 vendor-advisory
- bugs.debian.org
- people.canonical.com
- [oss-security] 20120625 CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs mailing-list
- [oss-security] 20120625 Re: CVE 2011-* Request -- rhythmbox (context plug-in): Insecure temporary directory use by loading template files for 'Album', 'Lyrics', and 'Artist' tabs mailing-list
- 54186 vdb-entry
- USN-1503-1 vendor-advisory
- bugzilla.gnome.org
- bugzilla.redhat.com
- rhythmbox-template-symlink(76538) vdb-entry
- openSUSE-SU-2012:0954 vendor-advisory
- bugs.debian.org issue-tracking