Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0148

Опубликовано: 05 мая 2009
Источник: nvd
CVSS2: 9.3
EPSS Средний

Описание

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cscope:cscope:13.0:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.0bl2:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.1:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.3:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.5:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.6:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.7:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.10753
Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 16 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

redhat
около 16 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

debian
около 16 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attacker ...

github
около 3 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

fstec
около 16 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 93%
0.10753
Средний

9.3 Critical

CVSS2

Дефекты

CWE-119