Untrusted search path vulnerability in the GObject Python interpreter wrapper...

Vulnerability Description

Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

References

• https://bugzilla.redhat.com/show_bug.cgi?id=481572
• http://www.openwall.com/lists/oss-security/2009/01/26/2
• http://bugzilla.gnome.org/show_bug.cgi?id=569648
• http://secunia.com/advisories/33823
• http://www.securityfocus.com/bid/33438
• http://security.gentoo.org/glsa/glsa-200904-03.xml
• http://secunia.com/advisories/33707
• https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00211.html
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:043