CVE-2009-0148
Fixed in a distro release EPSS 7%
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
Products: cscope
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cscope | 15.7a-1 |
| Debian 13 | cscope | 15.7a-1 |
| Debian 14 | cscope | 15.7a-1 |
| Debian 4.0 | cscope | 15.6-2+etch1 |
| Debian 5.0 | cscope | 15.6-6+lenny1 |
| Red Hat Enterprise Linux 3 | cscope | 0:15.5-16.RHEL3 |
| Red Hat Enterprise Linux 3 | cscope-debuginfo | 0:15.5-16.RHEL3 |
| Red Hat Enterprise Linux 4 | cscope | 0:15.5-10.RHEL4.3 |
| Red Hat Enterprise Linux 4 | cscope-debuginfo | 0:15.5-10.RHEL4.3 |
| Red Hat Enterprise Linux 5 | cscope | 0:15.5-15.1.el5_3.1 |
| Red Hat Enterprise Linux 5 | cscope-debuginfo | 0:15.5-15.1.el5_3.1 |