CVE-2009-0848: OS Command Injection
Published Mar 11, 2009
·Updated
Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."
Affected Software
2 affected components
openSUSE openSUSE=11.1
openSUSE openSUSE=11.0
Event History
Mar 11, 2009
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:19 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0848?
CVE-2009-0848 has a moderate severity rating due to its potential for allowing local users to execute arbitrary code.
2
How do I fix CVE-2009-0848?
To fix CVE-2009-0848, users should upgrade to a patched version of OpenSUSE that addresses the untrusted search path vulnerability.
3
Who is affected by CVE-2009-0848?
CVE-2009-0848 affects local users of OpenSUSE versions 11.0 and 11.1.
4
What type of vulnerability is CVE-2009-0848?
CVE-2009-0848 is classified as an untrusted search path vulnerability.
5
What can attackers achieve with CVE-2009-0848?
Attackers can exploit CVE-2009-0848 to execute arbitrary code if they successfully deploy a Trojan horse GTK module.