CVE-2012-3355

no score yetEPSS 0.6%

(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2012-07-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gnome:rhythmbox

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616673
http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-3355.html
http://www.openwall.com/lists/oss-security/2012/06/25/5
http://www.openwall.com/lists/oss-security/2012/06/25/7
http://www.securityfocus.com/bid/54186

Check your stack JSON