Gentoo Security Advisory GLSA 201207-08 (Gnash)

The remote host is missing updates announced in advisory GLSA 201207-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201207-08 : Gnash: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201207-08 Gnash: Multiple vulnerabilities Multiple vulnerabilities have been found in Gnash: The 'nsPluginInstance::setupCookies' function in plugin.cpp creates world-readable cookies with predictable file names CVE-2011-4328. The...

Gnash: Multiple vulnerabilities

Background Gnash is a GNU flash movie player that supports many SWF features. Description Multiple vulnerabilities have been found in Gnash: The "nsPluginInstance::setupCookies" function in plugin.cpp creates world-readable cookies with predictable file names CVE-2011-4328. The "GnashImage::size"...

CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions world readable for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information...

Information disclosure

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions world readable for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information...

CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions world readable for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information...

CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions world readable for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information...

PT-2012-1862 · Gnu · Gnash

Name of the Vulnerable Software and Affected Versions: Gnash versions prior to 0.8.10 Description: The issue allows local users to obtain sensitive information due to weak permissions used for cookie files with predictable names in /tmp. Recommendations: For versions prior to 0.8.10, update to...

CVE-2011-4328

Gnash prior to 0.8.10 stores cookies in /tmp with world-readable, predictable file names via nsPluginInstance::setupCookies(), allowing local users to obtain sensitive information. Affected versions: Gnash

CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions world readable for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information...

CVE-2011-4328: Undefined Security Weakness

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions world readable for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information...

CVE-2011-4328

Removed by vendor...

Debian Security Advisory DSA 2435-1 (gnash)

The remote host is missing an update to gnash announced via advisory DSA 2435-1. OpenVAS Vulnerability Test $Id: deb24351.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2435-1 gnash Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2435-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for gnash FEDORA-2012-2771

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gnash FEDORA-2012-2771

Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2012-2771 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for gnash FEDORA-2012-4032

Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2012-4032 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for gnash FEDORA-2012-4032

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : gnash-0.8.10-2.fc16 (2012-4032)

Fix CVE-2012-1175 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

[SECURITY] Fedora 15 Update: gnash-0.8.10-2.fc15

Gnash is capable of reading up to SWF v9 files and op-codes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...