CVE-2011-4328

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world
readable) for cookie files with predictable names in /tmp, which allows
local users to obtain sensitive information.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384&gt;