Lucene search

K
cve[email protected]CVE-2009-0848
HistoryMar 11, 2009 - 2:19 p.m.

CVE-2009-0848

2009-03-1114:19:15
CWE-78
web.nvd.nist.gov
23
4
cve-2009-0848
untrusted search path
vulnerability
gtk2
opensuse
nvd

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified “relative search path.”

Affected configurations

NVD
Node
opensuseopensuseMatch11.0
OR
opensuseopensuseMatch11.1

Social References

More

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%