CVEvulnerability

CVE-2008-5984

6.9 MEDIUM Published 2009-01-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

Affected configurations

• dia dia 0.96.1

References