Read the docs
TI-2012-03852 Aliases CVE-2012-4511GHSA-9vfv-f5vf-mq6m

services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr…

Priority LOW 30CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle (MITM) attack.

Why it matters now

EPSS 0.01815 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:a:gnome:libsocialweb:*:*:*:*:*:*:*:*up to 0.25.20VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.0:*:*:*:*:*:*:*0.25.0VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.1:*:*:*:*:*:*:*0.25.1VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.2:*:*:*:*:*:*:*0.25.2VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.3:*:*:*:*:*:*:*0.25.3VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.4:*:*:*:*:*:*:*0.25.4VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.5:*:*:*:*:*:*:*0.25.5VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.6:*:*:*:*:*:*:*0.25.6VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.7:*:*:*:*:*:*:*0.25.7VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.8:*:*:*:*:*:*:*0.25.8VulnerableGNOME
  • cpe:2.3:a:gnome:libsocialweb:*:*:*:*:*:*:*:* Versions up to 0.25.20 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.0:*:*:*:*:*:*:* Versions 0.25.0 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.1:*:*:*:*:*:*:* Versions 0.25.1 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.2:*:*:*:*:*:*:* Versions 0.25.2 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.3:*:*:*:*:*:*:* Versions 0.25.3 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.4:*:*:*:*:*:*:* Versions 0.25.4 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.5:*:*:*:*:*:*:* Versions 0.25.5 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.6:*:*:*:*:*:*:* Versions 0.25.6 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.7:*:*:*:*:*:*:* Versions 0.25.7 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.8:*:*:*:*:*:*:* Versions 0.25.8 Vulnerable ·GNOME
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gnome:libsocialweb:0.25.9:*:*:*:*:*:*:*0.25.9VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.10:*:*:*:*:*:*:*0.25.10VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.11:*:*:*:*:*:*:*0.25.11VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.12:*:*:*:*:*:*:*0.25.12VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.13:*:*:*:*:*:*:*0.25.13VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.14:*:*:*:*:*:*:*0.25.14VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.15:*:*:*:*:*:*:*0.25.15VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.16:*:*:*:*:*:*:*0.25.16VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.17:*:*:*:*:*:*:*0.25.17VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.18:*:*:*:*:*:*:*0.25.18VulnerableGNOME
cpe:2.3:a:gnome:libsocialweb:0.25.19:*:*:*:*:*:*:*0.25.19VulnerableGNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.9:*:*:*:*:*:*:* Versions 0.25.9 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.10:*:*:*:*:*:*:* Versions 0.25.10 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.11:*:*:*:*:*:*:* Versions 0.25.11 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.12:*:*:*:*:*:*:* Versions 0.25.12 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.13:*:*:*:*:*:*:* Versions 0.25.13 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.14:*:*:*:*:*:*:* Versions 0.25.14 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.15:*:*:*:*:*:*:* Versions 0.25.15 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.16:*:*:*:*:*:*:* Versions 0.25.16 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.17:*:*:*:*:*:*:* Versions 0.25.17 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.18:*:*:*:*:*:*:* Versions 0.25.18 Vulnerable ·GNOME
  • cpe:2.3:a:gnome:libsocialweb:0.25.19:*:*:*:*:*:*:* Versions 0.25.19 Vulnerable ·GNOME

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4511
  2. 2026-10-03 Alias added: GHSA-9vfv-f5vf-mq6m

References

Patch 1

Advisory 3

Other 1

  • TI-2011-03646 (1) services/twitter/twitter-contact-view.c and (2) services/twitter/twitter-item-view.c… CVSS 2.0MEDIUM 5.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences