Unscored severity · published Jan 28, 2009
CVE-2008-5987
Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EO
Eog · Gnome
2.22.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5987
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5987
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200904-06.xml
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/01/26/2
www.securityfocus.com
http://www.securityfocus.com/bid/33443
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=481553
More from Eog
–
CVE-2003-0165
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display