NVD

Id
5717  
Name
CVE-2008-5986  
Description
Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-28  
Modified Date
2009-02-05  
Seq
2008-5986  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
35197 5717 CVE-2008-5986 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504359  View
35198 5717 CVE-2008-5986 [oss-security] 20090126 CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)  View
35199 5717 CVE-2008-5986 33446  View
35200 5717 CVE-2008-5986 csound-pysyssetargv-privilege-escalation(48276)  View
35201 5717 CVE-2008-5986 https://bugzilla.redhat.com/show_bug.cgi?id=481550  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41777 JVNDB-2009-002784 Csound の VST プラグインにおける任意のコードを実行される脆弱性 Csound の (1) "Python スクリプティングを伴う VST プラグイン"、および (2) "Python にスコアを書き込む VST プラグイン" には、検索パスの不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-5986 36099 CVE-2008-5986 5717 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002784.html 2009-01-28 2012-06-26 View