CVE-2004-2541
Fixed in a distro release EPSS 2%
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
Products: cscope
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cscope | 15.5+cvs20050816-1.1 |
| Debian 13 | cscope | 15.5+cvs20050816-1.1 |
| Debian 14 | cscope | 15.5+cvs20050816-1.1 |
| Debian 3.0 | cscope | 15.3-1woody3 |
| Debian 3.1 | cscope | 15.5-1.1sarge1 |
| Red Hat Enterprise Linux 3 | cscope | 0:15.5-16.RHEL3 |
| Red Hat Enterprise Linux 3 | cscope-debuginfo | 0:15.5-16.RHEL3 |
| Red Hat Enterprise Linux 4 | cscope | 0:15.5-10.RHEL4.3 |
| Red Hat Enterprise Linux 4 | cscope-debuginfo | 0:15.5-10.RHEL4.3 |
| Red Hat Enterprise Linux 5 | cscope | 0:15.5-15.1.el5_3.1 |
| Red Hat Enterprise Linux 5 | cscope-debuginfo | 0:15.5-15.1.el5_3.1 |
| openSUSE Tumbleweed | cscope | 15.9-1.9 |