Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:tomboy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Tomboy (f7cff218-0cf7-569b-9845-a0b4774878c9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tomboy |
purl2cpe | 2026-06-01 10:17:20.448273 |
pkg:deb/ubuntu/tomboy |
purl2cpe | 2026-06-01 10:17:20.448276 |
pkg:github/matteonardi/tomboy |
purl2cpe | 2026-06-01 10:17:20.448278 |
pkg:github/tomboy-notes/tomboy |
purl2cpe | 2026-06-01 10:17:20.448281 |
pkg:rpm/fedora/tomboy |
purl2cpe | 2026-06-01 10:17:20.448284 |
pkg:rpm/opensuse/tomboy |
purl2cpe | 2026-06-01 10:17:20.448287 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-4005 |
vulnerable | 2026-06-08 04:55:18.270758 |
Details available
The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: vector 1 exists because of an incorrect fix for CVE-2005-4790.2.
Published: 2010-11-05T22:00:00.000Z
Updated: 2024-08-07T03:26:12.429Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.