Lucene search

RedhatCVE-2012-4427

HistoryOct 01, 2012 - 3:26 a.m.

CVE-2012-4427

2012-10-0103:26:16

CWE-94

redhat

web.nvd.nist.gov

cve-2012-4427

gnome

gnome-shell

remote attackers

extensions

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.024

Percentile

89.9%

JSON

The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page.

Affected configurations

Nvd

Node

gnomegnome-shellMatch3.4.1

VendorProductVersionCPE
gnomegnome-shell3.4.1cpe:2.3:a:gnome:gnome-shell:3.4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnome	gnome-shell	3.4.1	cpe:2.3:a:gnome:gnome-shell:3.4.1:::::::*

References

www.openwall.com/lists/oss-security/2012/09/08/1

www.openwall.com/lists/oss-security/2012/09/13/19

www.openwall.com/lists/oss-security/2012/09/13/26

www.openwall.com/lists/oss-security/2012/09/18/3

www.securityfocus.com/bid/55556

bugzilla.gnome.org/show_bug.cgi?id=684215

bugzilla.novell.com/show_bug.cgi?id=779473

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.024

Percentile

89.9%

JSON

Related for CVE-2012-4427