CVE-2008-5985 — Epiphany vulnerability

7 documents6 sources

Severity

6.9MEDIUMNVD

EPSS

0.1%

top 79.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gnome Epiphany

Timeline

PublishedJan 28

Latest updateMay 17

Description

Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

▶NVDgnome/epiphany2.22.3

🔴Vulnerability Details

GHSA

GHSA-5mj6-92x2-j3r9: Untrusted search path vulnerability in the Python interface in Epiphany 2↗2022-05-17

▶

OSV

CVE-2008-5985: Untrusted search path vulnerability in the Python interface in Epiphany 2↗2009-01-28

▶

CVEList

CVE-2008-5985: Untrusted search path vulnerability in the Python interface in Epiphany 2↗2009-01-28

▶

📋Vendor Advisories

Debian

CVE-2008-5985: epiphany-browser - Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, ...↗2008

▶

💬Community

Bugzilla

CVE-2008-5985 epiphany: untrusted python modules search path [fedora-all]↗2010-12-23

▶

Bugzilla

CVE-2008-5985 epiphany: untrusted python modules search path↗2009-01-26

▶