RCE in Opensuse

CVE-2009-0848

Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.005 (37.2th percentile) — read the EPSS interpretation.

Affected products

Opensuse — versions 11.0, 11.1
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUSE, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)