rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-0251 
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T16:00:00.000Z
CVE-2009-0252 
Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T16:00:00.000Z
CVE-2009-0253 
Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T18:00:00.000Z
CVE-2009-0254 
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T18:00:00.000Z
CVE-2009-0255 
The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T23:00:00.000Z
CVE-2009-0256 
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T23:00:00.000Z
CVE-2009-0257 
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T23:00:00.000Z
CVE-2009-0258 
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T23:00:00.000Z
CVE-2009-0259 
The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) .doc, (2) .wri, or (3) .rtf Word 97 file that triggers memory corruption, as exploited in the wild in December 2008, as demonstrated by 2008-crash.doc.rar, and a similar issue to CVE-2008-4841.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-22T23:00:00.000Z
CVE-2009-0260 
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with (1) the rename parameter or (2) the drawing parameter (aka the basename variable).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-23T18:38:00.000Z
CVE-2009-0261 
Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-23T18:38:00.000Z
CVE-2009-0262 
Stack-based buffer overflow in Triologic Media Player 7 and 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-23T18:38:00.000Z
CVE-2009-0263 
Multiple buffer overflows in Winamp 5.541 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a large Common Chunk (COMM) header value in an AIFF file and (2) a large invalid value in an MP3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-23T18:38:00.000Z
CVE-2009-0264 
Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T15:05:00.000Z
CVE-2009-0265 
Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T15:05:00.000Z
CVE-2009-0266 
Stack-based buffer overflow in Triologic Media Player 8.0.0.0 allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3l playlist file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T15:05:00.000Z
CVE-2009-0267 
libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T15:05:00.000Z
CVE-2009-0268 
Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T15:05:00.000Z
CVE-2009-0269 
fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T15:05:00.000Z
CVE-2009-0270 
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T19:00:00.000Z
CVE-2009-0271 
Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T19:00:00.000Z
CVE-2009-0272 
Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-02T22:00:00.000Z
CVE-2009-0273 
Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remote attackers to inject arbitrary web script or HTML via the (1) User.id and (2) Library.queryText parameters to gw/webacc, and other vectors involving (3) HTML e-mail and (4) HTML attachments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-02T22:00:00.000Z
CVE-2009-0274 
Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-03T19:00:00.000Z
CVE-2009-0275 
Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-26T20:00:00.000Z
CVE-2009-0276 
Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-03T19:00:00.000Z
CVE-2009-0277 
Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v platforms allows local users to cause a denial of service (panic) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T02:00:00.000Z
CVE-2009-0278 
Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T02:00:00.000Z
CVE-2009-0279 
SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0280 
Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0281 
SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0282 
Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0283 
Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0284 
SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0285 
Cross-site scripting (XSS) vulnerability in error.asp in BBSXP 5.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0286 
Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the form_data[script_class] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0287 
SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T18:00:00.000Z
CVE-2009-0288 
Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T19:00:00.000Z
CVE-2009-0289 
k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to cause a denial of service (service crash) via a long filename in a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T19:00:00.000Z
CVE-2009-0290 
Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the g4_path parameter.  NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T19:00:00.000Z
CVE-2009-0291 
Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the MAX_type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0292 
SQL injection vulnerability in show_cat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0293 
SQL injection vulnerability in profile_view.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0294 
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the config[installdir] parameter to (1) search.php, (2) archive.php, (3) comments.php, and (4) news.php; (5) News.php, (6) SendFriend.php, (7) Archive.php, and (8) Comments.php in base/; and possibly other components, different vectors than CVE-2007-1288.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0295 
SQL injection vulnerability in index.php in Information Technology Light Poll Information (ITLPoll) 2.7 Stable 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0296 
SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0297 
SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands via the (1) txtEmail and (2) txtPassword parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0298 
Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0299 
SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0301 
Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the (1) SaveFile and (2) ExportToXML methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0302 
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0303 
Cross-site scripting (XSS) vulnerability in Web Help Desk before 9.1.18 allows remote attackers to inject arbitrary web script or HTML via vectors related to "encoded JavaScript" and Helpdesk.woa.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0304 
The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related to an "insufficient validation security vulnerability," as demonstrated by SunOSipv6.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T20:00:00.000Z
CVE-2009-0305 
Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the (1) load or (2) loadJad method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-10T22:13:00.000Z
CVE-2009-0306 
Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (RIM) BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-04T15:00:00.000Z
CVE-2009-0307 
Cross-site scripting (XSS) vulnerability in the "Customize Statistics Page" (admin/statistics/ConfigureStatistics) in the MDS Connection Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the (1) customDate, (2) interval, (3) lastCustomInterval, (4) lastIntervalLength, (5) nextCustomInterval, (6) nextIntervalLength, (7) action, (8) delIntervalIndex, (9) addStatIndex, (10) delStatIndex, and (11) referenceTime parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-22T18:00:00.000Z
CVE-2009-0310 
Buffer overflow in SUSE blinux (aka sbl) in SUSE openSUSE 10.3 through 11.0 has unknown impact and attack vectors related to "incoming data and authentication-strings."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-18T16:00:00.000Z
CVE-2009-0311 
The Backbone service (ftbackbone.exe) in EMC AutoStart before 5.3 SP2 allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-27T22:00:00.000Z
CVE-2009-0312 
Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T01:00:00.000Z
CVE-2009-0313 
winetricks before 20081223 allows local users to overwrite arbitrary files via a symlink attack on the x_showmenu.txt temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T02:00:00.000Z
CVE-2009-0314 
Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T11:00:00.000Z
CVE-2009-0315 
Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T11:00:00.000Z
CVE-2009-0316 
Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T11:00:00.000Z
CVE-2009-0317 
Untrusted search path vulnerability in the Python language bindings for Nautilus (nautilus-python) allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T11:00:00.000Z
CVE-2009-0318 
Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-28T11:00:00.000Z