VULNERABILITY INTELLIGENCE
CVE-2009-0848
CVSS score4.4 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2009-03-11
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Untrusted search path vulnerability in GTK2 in OpenSUSE 11.0 and 11.1 allows local users to execute arbitrary code via a Trojan horse GTK module in an unspecified "relative search path."
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')