Definition

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

oval:org.mitre.oval:def:9633

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

Family:

unix

Status:

ACCEPTED

Platform(s):

CentOS Linux 4
Oracle Linux 5
CentOS Linux 3
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 3
CentOS Linux 5
Oracle Linux 4
Red Hat Enterprise Linux 4

Class:

vulnerability

Reference(s):

CVE-2009-0148

Product(s):