Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Jun 16, 2026
CVE-2012-3378
CVE-2012-3378
Description
The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in /tmp/at-spi2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2= 2.5.2+ 1 more
- (no CPE)range: = 2.5.2
- cpe:2.3:a:gnome:at-spi2-atk:2.5.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.