Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnash:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGnash (594704c4-1544-5077-8ec3-d11afdcd4ac1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnash purl2cpe 2026-06-01 10:11:55.392382
pkg:deb/ubuntu/gnash purl2cpe 2026-06-01 10:11:55.392385
pkg:github/charmander/gnash purl2cpe 2026-06-01 10:11:55.392388
pkg:github/gnu-mirror-unofficial/gnash purl2cpe 2026-06-01 10:11:55.392391
pkg:github/markpagebxl/gnash purl2cpe 2026-06-01 10:11:55.392393
pkg:github/timretout/gnash purl2cpe 2026-06-01 10:11:55.392396
pkg:gnu/gnash purl2cpe 2026-06-01 10:11:55.392399
pkg:rpm/opensuse/gnash purl2cpe 2026-06-01 10:11:55.392402

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4328 vulnerable 2026-06-08 04:59:30.691176 Details available
plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.
Published: 2012-06-16T00:00:00.000Z
Updated: 2024-08-07T00:01:51.570Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.