Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ed9v-ahyq-j7ee
Vulnerability ID VCID-ed9v-ahyq-j7ee
Aliases CVE-2008-5987
Summary An untrusted search path vulnerability in the Eye of GNOME might result in the execution of arbitrary code.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
epss 0.0006 https://api.first.org/data/v1/epss?cve=CVE-2008-5987
cvssv2 6.9 https://nvd.nist.gov/vuln/detail/CVE-2008-5987
Reference id Reference type URL
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5987.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5987
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5987
http://security.gentoo.org/glsa/glsa-200904-06.xml
http://www.openwall.com/lists/oss-security/2009/01/26/2
http://www.securityfocus.com/bid/33443
481553 https://bugzilla.redhat.com/show_bug.cgi?id=481553
504352 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352
cpe:2.3:a:gnome:eog:2.22.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gnome:eog:2.22.3:*:*:*:*:*:*:*
CVE-2008-5987 https://nvd.nist.gov/vuln/detail/CVE-2008-5987
GLSA-200904-06 https://security.gentoo.org/glsa/200904-06
No exploits are available.
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2008-5987
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.18755
EPSS Score 0.0006
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:03:02.775428+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200904-06 38.0.0