Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnash:0.8.10:*:*:*:*:*:*:*

part: a version: 0.8.10 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGnash (594704c4-1544-5077-8ec3-d11afdcd4ac1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnash purl2cpe 2026-06-01 10:11:55.392381
pkg:deb/ubuntu/gnash purl2cpe 2026-06-01 10:11:55.392384
pkg:github/charmander/gnash purl2cpe 2026-06-01 10:11:55.392387
pkg:github/gnu-mirror-unofficial/gnash purl2cpe 2026-06-01 10:11:55.392389
pkg:github/markpagebxl/gnash purl2cpe 2026-06-01 10:11:55.392392
pkg:github/timretout/gnash purl2cpe 2026-06-01 10:11:55.392395
pkg:gnu/gnash purl2cpe 2026-06-01 10:11:55.392398
pkg:rpm/opensuse/gnash purl2cpe 2026-06-01 10:11:55.392400

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1175 vulnerable 2026-06-08 05:00:47.995489 Details available
Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow.
Published: 2012-08-26T20:00:00.000Z
Updated: 2024-08-06T18:53:36.429Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.