CVE-2009-0316

Common Vulnerabilities and Exposures

CVE-2009-0316 at MITRE

Details

Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983), as demonstrated by an erroneous search path for plugin/bike.vim in bicyclerepair.

Novell Bugzilla entry: 470100

No SUSE Security Announcements cross referenced.

Product(s)	Fixed package version(s)	References
openSUSE 10.3 openSUSE 11.0	`gvim >= 7.2-9.1` `vim >= 7.2-9.1` `vim-base >= 7.2-9.1` `vim-data >= 7.2-9.1` `vim-enhanced >= 7.2-9.1`	ZYPP Patch Nr: 6023 SAT Patch Nr: 561
openSUSE 11.0	`vim-debuginfo >= 7.2-9.1` `vim-debugsource >= 7.2-9.1`	ZYPP Patch Nr: 6023 SAT Patch Nr: 561
openSUSE 11.1	`vim-debuginfo >= 7.2-7.4.1` `vim-debugsource >= 7.2-7.4.1`	ZYPP Patch Nr: 6023 SAT Patch Nr: 561
openSUSE 11.1	`gvim >= 7.2-7.4.1` `vim >= 7.2-7.4.1` `vim-base >= 7.2-7.4.1` `vim-data >= 7.2-7.4.1` `vim-enhanced >= 7.2-7.4.1`	ZYPP Patch Nr: 6023 SAT Patch Nr: 561