GNU Gnash 0.8.8

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnash:0.8.8:*:*:*:*:*:*:*

part: a version: 0.8.8 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGnash (594704c4-1544-5077-8ec3-d11afdcd4ac1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnash purl2cpe 2026-06-01 10:11:55.392425
pkg:deb/ubuntu/gnash purl2cpe 2026-06-01 10:11:55.392426
pkg:github/charmander/gnash purl2cpe 2026-06-01 10:11:55.392428
pkg:github/gnu-mirror-unofficial/gnash purl2cpe 2026-06-01 10:11:55.392429
pkg:github/markpagebxl/gnash purl2cpe 2026-06-01 10:11:55.392430
pkg:github/timretout/gnash purl2cpe 2026-06-01 10:11:55.392432
pkg:gnu/gnash purl2cpe 2026-06-01 10:11:55.392433
pkg:rpm/opensuse/gnash purl2cpe 2026-06-01 10:11:55.392434

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4328 vulnerable 2026-06-08 04:59:30.693069 Details available
plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.
Published: 2012-06-16T00:00:00.000Z
Updated: 2024-08-07T00:01:51.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4337 vulnerable 2026-06-08 04:56:27.203767 Details available
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnings.$$, or (3) /tmp/gnash-configure-recommended.$$ files.
Published: 2011-01-14T22:00:00.000Z
Updated: 2024-08-07T03:43:14.553Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.