CVE-2008-5984

no score yetEPSS 0.4%

Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
Published: 2009-01-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dia:dia

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504251
http://secunia.com/advisories/33672
http://secunia.com/advisories/33703
http://www.mandriva.com/security/advisories?name=MDVSA-2009:040
http://www.mandriva.com/security/advisories?name=MDVSA-2009:046

Check your stack JSON