CVE-2011-4328

CVE-2011-4328 describes a vulnerability in Gnash versions prior to 0.8.10, where cookie files stored in /tmp had world-readable permissions and predictable names, allowing local users to access sensitive information. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), this medium-severity flaw indicates that an attacker could easily gain unauthorized access to data without authentication. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this vulnerability.