CVE-2012-3378

CVE-2012-3378 describes a predictable temporary file name vulnerability in the register_application function of GNOME at-spi2-atk 2.5.2. This flaw allows local users to create or truncate files through a symlink attack on temporary socket files in /tmp/at-spi2, due to the absence of a seeded random number generator. The vulnerability has a low severity CVSS score of 3.3, indicating a local attack vector with medium attack complexity, resulting in partial integrity and availability impacts. There is no evidence of active exploitation, no public exploit code available, and minimal community discussion or media coverage, suggesting a low current threat level.