CVE-2008-5987: Untrusted search path vulnerability in the Python interface in Eye of GNOME (eog) 2.22.3, and possibly othe...

Security readout for executives and security teams

This is a legacy local-code-execution issue in Eye of GNOME’s Python interface. If a user opens or runs the application from a directory controlled by another local user, a malicious Python file there could be executed. The business risk is mainly on old Linux desktop builds or shared systems, not internet-facing services. Exposure is most likely on legacy Linux systems running Eye of GNOME 2.22.3 or related distro packages with the Python interface enabled. Current patched distributions are less likely affected, but the source bundle does not provide fixed version details. Treat as a legacy hygiene item unless the organization still operates old GNOME desktops or multi-user Linux workstations. It is not an internet-exposed emergency, but affected shared systems should be remediated to prevent local privilege-adjacent user compromise. Mitigation focus: Check vendor advisories for fixed Eye of GNOME and Python package versions.; Prioritize upgrades or removal on shared legacy Linux desktop systems.; Avoid launching eog from untrusted or shared writable directories..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.