CVE-2009-0318

CVE-2009-0318 describes an untrusted search path vulnerability in the Gnumeric spreadsheet application's GObject Python interpreter wrapper. This flaw allows a local attacker to execute arbitrary code by placing a malicious Python file in the current working directory, leveraging a weakness in the PySys_SetArgv function (CVE-2008-5983). The vulnerability has a CVSS score of 6.9, indicating high severity due to its local attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.