Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-0148

Опубликовано: 05 мая 2009
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cscope:cscope:13.0:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.0bl2:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.1:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.3:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.4:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.5:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.6:*:*:*:*:*:*:*
cpe:2.3:a:cscope:cscope:15.7:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.06765
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 17 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

redhat
больше 17 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

debian
около 17 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attacker ...

github
около 4 лет назад

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

fstec
около 17 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 93%
0.06765
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119