CVE:CVE-2012-2737
CNNVD:CNNVD-201206-545
AccountsService 0.6.22之前版本中的user_change_icon_file_authorized_cb()’函数中存在本地文件泄露漏洞。攻击者可利用该漏洞在运行受影响应用程序的计算机的本地文件中获取敏感信息，且有助于进一步攻击。
solution:Upgrade ray_stode accountsservice to a higher version than 0.6.21,0.4,0.5,0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.6.9,0.6.10,0.6.11,0.6.12,0.6.13,0.6.14,0.6.15,0.6.16,0.6.17,0.6.18,0.6.19,0.6.20,and avoid the version (,0.6.21],0.4,0.5,0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,0.6.9,0.6.10,0.6.11,0.6.12,0.6.13,0.6.14,0.6.15,0.6.16,0.6.17,0.6.18,0.6.19,0.6.20