CVE:CVE-2012-3355
CNNVD:CNNVD-201206-452
Rhythmbox是GNOME桌面环境中默认的音乐播放及管理软件。
GNOME Rhythmbox中存在不安全临时文件创建漏洞。本地访问攻击者可利用该漏洞执行符号链接攻击，成功挂载符号攻击可允许攻击者删除或修改敏感文件，也可能存在其他攻击。Rhythmbox 0.13.3版本中存在漏洞，其他版本也可能受到影响。
solution:Upgrade gnome rhythmbox to a higher version than 0.13.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.88,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.9.0,0.9.1,0.9.2,0.9.3,0.9.3.1,0.9.4,0.9.4.1,0.9.5,0.9.6,0.9.6.90,0.9.7,0.9.8,0.10.0,0.10.0.90,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.4,0.11.5,0.11.6,0.12.0,0.12.1,0.12.2,0.12.3,0.12.4,0.12.5,0.12.6,0.12.7,0.12.8,0.13.0,0.13.1,0.13.2,and avoid the version (,0.13.3],0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.88,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.9.0,0.9.1,0.9.2,0.9.3,0.9.3.1,0.9.4,0.9.4.1,0.9.5,0.9.6,0.9.6.90,0.9.7,0.9.8,0.10.0,0.10.0.90,0.10.1,0.11.0,0.11.1,0.11.2,0.11.3,0.11.4,0.11.5,0.11.6,0.12.0,0.12.1,0.12.2,0.12.3,0.12.4,0.12.5,0.12.6,0.12.7,0.12.8,0.13.0,0.13.1,0.13.2