CVE-2009-3289

HIGH · CVSS 7.8 EPSS 0.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-3289

Severity

HIGH

CVSS

7.8

EPSS

0.36%

Original NVD Description

The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.