CVE-2008-7291

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

gri before 2.12.18 generates temporary files in an insecure way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Nov 8, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-72922.1Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uCVE-2008-72935.8Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attCVE-2008-72945.8Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middCVE-2008-72955.8Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle CVE-2008-72965.8Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to ovCVE-2008-72975.8Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwriteCVE-2008-72985.8The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middCVE-2008-72995.0IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID pCVE-2008-73008.5The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled CVE-2008-73017.5SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username paCVE-2008-73027.5SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execuCVE-2008-73037.6The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remo
CVE-2008-7291: Critical severity, CVSS 9.8 | Vulnix