Lucene search
RootSSV:4789HistoryFeb 19, 2009 - 12:00 a.m.
gedit PySys_SetArgv函数代码执行漏洞
2009-02-1900:00:00
Root
www.seebug.org
14
0.0004 Low
EPSS
Percentile
5.7%
BUGTRAQ ID: 33445
CVE(CAN) ID: CVE-2009-0314
gedit是GNOME项目的小型文本编辑器。
gedit的Python模块可能使用当前工作目录作为模块搜索路径，如果用户受骗在包含有Python文件名类似于gedit所使用的模块名的目录中执行gedit的话，就会通过PySys_SetArgv函数以其他用户的权限执行任意Python代码。
GNOME gEdit 2.x
厂商补丁：
GNOME
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://marc.info/?l=bugtraq&m=123481969304395&w=2” target=“_blank”>http://marc.info/?l=bugtraq&m=123481969304395&w=2</a>
https://bugzilla.redhat.com/attachment.cgi?id=330022
Related
openvas
openvas
Fedora Core 9 FEDORA-2009-1189 (gedit)
2009-02-02 00:00:00
Mandrake Security Advisory MDVSA-2009:039 (gedit)
2009-02-18 00:00:00
Fedora Core 9 FEDORA-2009-1189 (gedit)
2009-02-02 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : gedit (MDVSA-2009:039)
2009-04-23 00:00:00
Fedora 9 : gedit-2.22.3-3.fc9 (2009-1189)
2009-02-01 00:00:00
GLSA-200903-41 : gedit: Untrusted search path
2009-03-31 00:00:00
gentoo
gentoo
gedit: Untrusted search path
2009-03-30 00:00:00
prion
prion
Design/Logic Flaw
2009-01-28 11:30:00
ubuntucve
ubuntucve
CVE-2009-0314
2009-01-28 00:00:00
debiancve
debiancve
CVE-2009-0314
2009-01-28 11:30:00
cve
cve
CVE-2009-0314
2009-01-28 11:30:00
securityvulns
securityvulns
blender / gedit / gnumeric / vim / eog python scripts code execution
2009-04-07 00:00:00