NVD

Id
47648  
Name
CVE-2009-0316  
Description
Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-01-28  
Modified Date
2010-04-01  
Seq
2009-0316  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238712 47648 CVE-2009-0316 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305  View
238713 47648 CVE-2009-0316 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937  View
238714 47648 CVE-2009-0316 APPLE-SA-2010-03-29-1  View
238715 47648 CVE-2009-0316 http://support.apple.com/kb/HT4077  View
238716 47648 CVE-2009-0316 MDVSA-2009:047  View
238717 47648 CVE-2009-0316 [debian-bugs-rc] 20080805 Bug#484305: bicyclerepair: bike.vim imports untrusted python files from cwd  View
238718 47648 CVE-2009-0316 [oss-security] 20090126 CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)  View
238719 47648 CVE-2009-0316 33447  View
238720 47648 CVE-2009-0316 vim-pysyssetargv-privilege-escalation(48275)  View
238721 47648 CVE-2009-0316 https://bugzilla.redhat.com/show_bug.cgi?id=481565  View
238722 47648 CVE-2009-0316 https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40631 JVNDB-2009-001637 Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性 Vim の Python インターフェースの src/if_python.c には、信頼性のない検索パスの脆弱性が存在します。 CVE-2009-0316 37747 CVE-2009-0316 47648 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001637.html 2009-01-28 2010-04-26 View