CVE-2012-0956

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the <a> tag of a Twitter feed.

Score

CVSS 2.0 6.8 Medium

Status

Modified - security@ubuntu.com

Published

2012-09-28

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Ubiquity-slideshow-ubuntu (Ubiquity Slideshow Team)

References

• http://www.ubuntu.com/usn/USN-1561-1
• https://bugs.launchpad.net/ubuntu/%2Bsource/ubiquity-slideshow-ubuntu/%2Bbug/991982