CVE-2012-0844: 
Linux Debian vulnerability analysis and mitigation

CVE-2012-0844 is an information disclosure vulnerability affecting Netsurf browser through version 2.8. The vulnerability stems from the browser's cookie jar being world-readable, potentially exposing sensitive user information to unauthorized local users (NVD, Debian Tracker).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, and a CVSS v2.0 Base Score of 2.1 (LOW) with vector string (AV:L/AC:L/Au:N/C:P/I:N/A:N). The vulnerability is categorized under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) (NVD).

The vulnerability allows unauthorized local users to access sensitive information stored in the browser's cookie jar, potentially compromising user privacy and security by exposing session tokens, authentication credentials, and other sensitive data stored in cookies (NVD).

The vulnerability requires local access to the system and can be exploited by reading the world-readable cookie jar file. No specific exploit code or reports of active exploitation in the wild have been publicly documented (NVD).

The vulnerability has been fixed in Netsurf version 2.8-2 and later releases. Debian has addressed this issue in their bookworm and bullseye distributions with version 3.10-1, and in sid and trixie distributions with version 3.11-2 (Debian Tracker).