CVE-2009-1577
Fixed in a distro release EPSS 7%
Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.
Products: cscope
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cscope | 15.6-1 |
| Debian 13 | cscope | 15.6-1 |
| Debian 14 | cscope | 15.6-1 |
| Red Hat Enterprise Linux 3 | cscope | 0:15.5-16.RHEL3 |
| Red Hat Enterprise Linux 3 | cscope-debuginfo | 0:15.5-16.RHEL3 |
| Red Hat Enterprise Linux 4 | cscope | 0:15.5-10.RHEL4.3 |
| Red Hat Enterprise Linux 4 | cscope-debuginfo | 0:15.5-10.RHEL4.3 |