CVE-2008-5985 Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current....
MediumCVSS 6.9
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME epiphany | = 2.22.3 | No fix listed |
| debian/epiphany-browser(Debian:12) | < 2.22.3-7 | 2.22.3-7 |
| debian/epiphany-browser(Debian:13) | < 2.22.3-7 | 2.22.3-7 |
| debian/epiphany-browser(Debian:14) | < 2.22.3-7 | 2.22.3-7 |
References
- bugs.debian.org
- 34187 third-party-advisory
- GLSA-200903-16 vendor-advisory
- MDVSA-2009:048 vendor-advisory
- [oss-security] 20090126 CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric) mailing-list
- 33441 vdb-entry
- bugzilla.redhat.com
- Debian Security Tracker CVE-2008-5985 vendor-advisory
- bugs.debian.org issue-tracking