CVE-2012-4427

gnome-shell - Remote Code Execution via Extension Installation

Title source: llm
STIX 2.1

Description

The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page.

References (7)

Core 7
Core References
Vendor Advisory x_refsource_misc
https://bugzilla.gnome.org/show_bug.cgi?id=684215
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/09/13/19
Exploit mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/09/08/1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/09/18/3
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/09/13/26
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55556

Scores

EPSS 0.0103
EPSS Percentile 77.5%

Details

CWE
CWE-94
Status published
Products (1)
gnome/gnome-shell 3.4.1
Published Oct 01, 2012
Tracked Since Feb 18, 2026