CVE-2010-4337: Low severity gnu gnash vulnerability
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/gnash-configure-errors.$$, (2) /tmp/gnash-configure-warnings.$$, or (3) /tmp/gnash-configure-recommended.$$ files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4337?
CVE-2010-4337 is classified as a moderate severity vulnerability due to its potential for local file overwriting via a symlink attack.
How do I fix CVE-2010-4337?
To fix CVE-2010-4337, users should update to a patched version of gnash that addresses this symlink vulnerability.
Which versions of gnash are affected by CVE-2010-4337?
CVE-2010-4337 specifically affects gnash version 0.8.8.
Can CVE-2010-4337 be exploited remotely?
No, CVE-2010-4337 requires local access to exploit the symlink vulnerability.
What files are involved in the CVE-2010-4337 vulnerability?
CVE-2010-4337 involves symlink attacks on the temporary files /tmp/gnash-configure-errors.$$, /tmp/gnash-configure-warnings.$$, and /tmp/gnash-configure-recommended.$$.