CVE-2012-0956
medium
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8
Description
ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the <a> tag of a Twitter feed.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: security@ubuntu.com — http://www.ubuntu.com/usn/USN-1561-1
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | {"endIncluding":"58.1"} | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 49 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 52 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 53 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 54 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 55 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 56 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 57 | |
| ubiquity_slideshow_team | ubiquity-slideshow-ubuntu | 58 | |
References
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.