CVE-2008-5986 | BDVDB-2026-34528 Detail

Description#

Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/33446
https://bugzilla.redhat.com/show_bug.cgi?id=481550
https://exchange.xforce.ibmcloud.com/vulnerabilities/48276
http://www.openwall.com/lists/oss-security/2009/01/26/2
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504359

Exploit#

No public exploit known

History#

Version 12009-01-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.