CVE-2011-4328: GNU Gnash

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.

Affected products

• GNU Gnash: up to and including 0.8.9; version 0.8.5 only; version 0.8.7 only; version 0.8.8 only; version 0.8.9 only

Published 2012-06-16. Last modified 2026-06-16.