CVE-2009-0316
- State
- Published
- Severity
- Not scored
- Published
- Jan 28, 2009
- Updated
- Aug 7, 2024
- Reserved
- Jan 27, 2009
Description
Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493937
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484305
- 33447vdb-entry
- [oss-security] 20090126 CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)mailing-list
- APPLE-SA-2010-03-29-1vendor-advisory
- [debian-bugs-rc] 20080805 Bug#484305: bicyclerepair: bike.vim imports untrusted python files from cwdmailing-list
- https://svn.pardus.org.tr/pardus/2008/applications/editors/vim/files/official/7.2.045
- http://support.apple.com/kb/HT4077
- MDVSA-2009:047vendor-advisory
- vim-pysyssetargv-privilege-escalation(48275)vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=481565
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.