CVE:CVE-2012-0842
CNNVD:CNNVD-201911-1149
surf是一款使用C语言编写的开源Web浏览器。
surf中存在安全漏洞，该漏洞源于所创建的cookie文件为全局可读取。攻击者可利用该漏洞窃取cookies。
solution:Upgrade suckless surf to a higher version than 0.5,and avoid the version (,0.5); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0