CVE-2012-4511 services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-...
MediumCVSS 5.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME libsocialweb | <= 0.25.20 | No fix listed |
| GNOME libsocialweb | = 0.25.0 | No fix listed |
| GNOME libsocialweb | = 0.25.1 | No fix listed |
| GNOME libsocialweb | = 0.25.2 | No fix listed |
| GNOME libsocialweb | = 0.25.3 | No fix listed |
| GNOME libsocialweb | = 0.25.4 | No fix listed |
| GNOME libsocialweb | = 0.25.5 | No fix listed |
| GNOME libsocialweb | = 0.25.6 | No fix listed |
| GNOME libsocialweb | = 0.25.7 | No fix listed |
| GNOME libsocialweb | = 0.25.8 | No fix listed |
| GNOME libsocialweb | = 0.25.9 | No fix listed |
| GNOME libsocialweb | = 0.25.10 | No fix listed |
| GNOME libsocialweb | = 0.25.11 | No fix listed |
| GNOME libsocialweb | = 0.25.12 | No fix listed |
| GNOME libsocialweb | = 0.25.13 | No fix listed |
| GNOME libsocialweb | = 0.25.14 | No fix listed |
| GNOME libsocialweb | = 0.25.15 | No fix listed |
| GNOME libsocialweb | = 0.25.16 | No fix listed |
| GNOME libsocialweb | = 0.25.17 | No fix listed |
| GNOME libsocialweb | = 0.25.18 | No fix listed |
| GNOME libsocialweb | = 0.25.19 | No fix listed |
References
- git.gnome.org issue-tracking patch
- [oss-security] 20121010 CVE request: libsocialweb untrusted connection to flickr mailing-list third-party-advisory
- [oss-security] 20121010 Re: CVE request: libsocialweb untrusted connection to flickr mailing-list third-party-advisory
- [oss-security] 20121023 Wrong affected version in the CVE-2012-4511 mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking