Debian Security Bug TrackerDEBIANCVE:CVE-2008-5986CVE-2008-5986
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
23.5%
Untrusted search path vulnerability in the (1) βVST plugin with Python scriptingβ and (2) βVST plugin for writing score generators in Pythonβ in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | csound | <Β 5.08.2~dfsg-1.1 | csound_5.08.2~dfsg-1.1_all.deb |
| Debian | 11 | all | csound | <Β 5.08.2~dfsg-1.1 | csound_5.08.2~dfsg-1.1_all.deb |
| Debian | 999 | all | csound | <Β 5.08.2~dfsg-1.1 | csound_5.08.2~dfsg-1.1_all.deb |
| Debian | 13 | all | csound | <Β 5.08.2~dfsg-1.1 | csound_5.08.2~dfsg-1.1_all.deb |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
23.5%