Unscored severity · published Jan 28, 2009
CVE-2008-5985
Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Epiphany · Gnome
2.22.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5985
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504363
secunia.com
http://secunia.com/advisories/34187
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200903-16.xml
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2009:048
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/01/26/2
www.securityfocus.com
http://www.securityfocus.com/bid/33441
More from Epiphany
8.1
CVE-2019-6251
WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections
7.5
CVE-2023-26081
In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts
7.5
CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title
7.5
CVE-2018-12016
libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open and document.write…
7.5
CVE-2018-11396
ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that…