Vulnerabilities > Gnome > Rhythmbox

DATE CVE VULNERABILITY TITLE RISK
2012-07-17 CVE-2012-3355 Code Injection vulnerability in Gnome Rhythmbox
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.
local
low complexity
gnome CWE-94
3.6
2009-09-08 CVE-2008-7185 Improper Input Validation vulnerability in Gnome Rhythmbox 0.11.5
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_lookup function in b-playlist-manager.c.
network
gnome CWE-20
4.3