CVE-2012-3378

The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable…

published August 31, 2012

CVSS
—
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in /tmp/at-spi2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00313 · 22.7th percentile
Published
2012-08-31T18:00Z
EPSS history
Timeline
  • 31 AUG 18:00Z
    The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable…
    cvelistv5