CVE-2009-0318
CVE-2009-0318
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://bugzilla.redhat.com/show_bug.cgi?id=481572
- http://www.openwall.com/lists/oss-security/2009/01/26/2
- http://bugzilla.gnome.org/show_bug.cgi?id=569648
- http://secunia.com/advisories/33823
- http://www.securityfocus.com/bid/33438
- http://security.gentoo.org/glsa/glsa-200904-03.xml
- http://secunia.com/advisories/33707
- https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:043
- https://nvd.nist.gov/vuln/detail/CVE-2009-0318