Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnash:0.8.7:*:*:*:*:*:*:*

part: a version: 0.8.7 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGnash (594704c4-1544-5077-8ec3-d11afdcd4ac1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnash purl2cpe 2026-06-01 10:11:55.392414
pkg:deb/ubuntu/gnash purl2cpe 2026-06-01 10:11:55.392416
pkg:github/charmander/gnash purl2cpe 2026-06-01 10:11:55.392417
pkg:github/gnu-mirror-unofficial/gnash purl2cpe 2026-06-01 10:11:55.392418
pkg:github/markpagebxl/gnash purl2cpe 2026-06-01 10:11:55.392420
pkg:github/timretout/gnash purl2cpe 2026-06-01 10:11:55.392421
pkg:gnu/gnash purl2cpe 2026-06-01 10:11:55.392422
pkg:rpm/opensuse/gnash purl2cpe 2026-06-01 10:11:55.392424

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4328 vulnerable 2026-06-08 04:59:30.692341 Details available
plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.
Published: 2012-06-16T00:00:00.000Z
Updated: 2024-08-07T00:01:51.570Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.