REDHAT-BUG-755518: Low severity gnu gnash vulnerability
A security flaw was found in the way Shockwave Flash plug-in of the gnash, a GNU flash movie player, performed management of HTTP cookies (they were stored under /tmp directory with world-readable permissions). A local attacker could use this flaw to obtain sensitive information.
References: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=649384
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-755518?
The severity of REDHAT-BUG-755518 is considered high due to the potential for local attackers to access sensitive information.
How do I fix REDHAT-BUG-755518?
To fix REDHAT-BUG-755518, update your GNU Gnash to the latest version that addresses the vulnerability.
What systems are affected by REDHAT-BUG-755518?
REDHAT-BUG-755518 affects any system using the GNU Gnash Flash movie player with the vulnerable cookie management configuration.
Can REDHAT-BUG-755518 lead to data breaches?
Yes, REDHAT-BUG-755518 can lead to data breaches by allowing local attackers to read sensitive HTTP cookies.
Is there a workaround for REDHAT-BUG-755518?
A potential workaround for REDHAT-BUG-755518 is to restrict access to the /tmp directory or to avoid using the vulnerable Gnash plug-in.