Gnash (Gnu) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2012-08-26. Vendor: Gnu.

CVEs of Gnash

• CVE-2012-1175 - CVSS 6.8 (medium), 2012-08-26: Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and…
• CVE-2011-4328 - CVSS 5 (medium), 2012-06-16: plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local…
• CVE-2010-4337 - CVSS 3.3 (low), 2011-01-14: The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2)…