6.9
CVSSv2

CVE-2009-0317

Published: 28/01/2009 Updated: 05/02/2009
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

Vulnerable Product Search on Vulmon Subscribe to Product

gnome nautilus-python

Vendor Advisories

Debian Bug report logs - #513419 nautilus-python: CVE-2009-0317 untrusted search path vulnerability Package: nautilus-python; Maintainer for nautilus-python is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Nico Golde <nion@debianorg> Date: Wed, 28 Jan 2009 22:15:01 UTC Severi ...