Approved changes feed: RSS · Atom

cpe:2.3:a:csound:csound:5.08.2:*:*:*:*:*:*:*

part: a version: 5.08.2 update: *

VendorCsound (f037b523-9881-59cf-8a78-808a0eef4b94)
ProductCsound (455ed7d8-b85b-5ff4-9705-87a8f0210aa7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/csound purl2cpe 2026-06-01 10:13:44.926306
pkg:deb/ubuntu/csound purl2cpe 2026-06-01 10:13:44.926310
pkg:github/csound/csound purl2cpe 2026-06-01 10:13:44.926313
pkg:rpm/fedora/csound purl2cpe 2026-06-01 10:13:44.926315
pkg:rpm/opensuse/csound purl2cpe 2026-06-01 10:13:44.926318

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5986 vulnerable 2026-06-08 04:50:53.727852 Details available
Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Published: 2009-01-28T11:00:00.000Z
Updated: 2024-08-07T11:13:13.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.