Upstream information
Description
(1) AlbumTab.py, (2) ArtistTab.py, (3) LinksTab.py, and (4) LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory.NVD CVSS v2 Base Score: 3.6 (AV:L/AC:L/Au:N/C:N/I:P/A:P)
Novell/SUSE information
Novell Bugzilla entry: 768681 SUSE Security Advisories:- openSUSE-SU-2012:0954-1, published Mon, 6 Aug 2012 12:08:28 +0200 (CEST)