Unscored CVE-2009-0315 EUVD-2009-0319GHSA-f2r4-w89x-fvh9

Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python fi…

Published Jan 28, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

References

https://bugzilla.redhat.com/show_bug.cgi?id=481560
[oss-security] 20090126 CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric) mailing-list
33444 vdb-entry
MDVSA-2009:059 vendor-advisory