Gnome Eog vulnerabilities

2 CVEs affecting Gnome Eog, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5987, published 2009-01-28.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-0165, published 2003-04-02. Medium severity, CVSS 4.6. EPSS: 1.7% chance of exploitation in the next 30 days. Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifiers in a command line argument for the file to display.
• CVE-2008-5987, published 2009-01-28. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in…