CVE-2008-5986
Last modified
CVE-2008-5986 is a vulnerability of currently unknown severity. Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Csound | Csound | 5.08.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5986?
How severe is CVE-2008-5986?
How do I fix CVE-2008-5986?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5980Ocean12 Mailing List Manager Gold stores sensitive data unde…
- CVE-2008-5981PacPoll 4.0 stores sensitive information under the web root …
- CVE-2008-5982Format string vulnerability in BMC PATROL Agent before 3.7.3…
- CVE-2008-5983Untrusted search path vulnerability in the PySys_SetArgv API…
- CVE-2008-5984Untrusted search path vulnerability in the Python plugin in …
- CVE-2008-5985Untrusted search path vulnerability in the Python interface …
- CVE-2008-5987Untrusted search path vulnerability in the Python interface …
- CVE-2008-5988SQL injection vulnerability in scripts/recruit_details.php i…
- CVE-2008-5989Directory traversal vulnerability in defs.php in PHPcounter …
- CVE-2008-5990Directory traversal vulnerability in connect/init.inc in eme…
- CVE-2008-5991Directory traversal vulnerability in docs.php in MailWatch f…
- CVE-2008-5992Multiple SQL injection vulnerabilities in Jetik Emlak Sistem…
Are you affected by CVE-2008-5986?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST