CVE-2004-2541 Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
MediumCVSS 6.9
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cscope | = 15.5 | No fix listed |
| debian/cscope(Debian:12) | < 15.5+cvs20050816-1.1 | 15.5+cvs20050816-1.1 |
| debian/cscope(Debian:13) | < 15.5+cvs20050816-1.1 | 15.5+cvs20050816-1.1 |
| debian/cscope(Debian:14) | < 15.5+cvs20050816-1.1 | 15.5+cvs20050816-1.1 |
References
- docs.info.apple.com
- APPLE-SA-2007-07-31 vendor-advisory
- 13237 third-party-advisory vendor-advisory
- 20191 third-party-advisory
- 20564 third-party-advisory
- 26235 third-party-advisory
- 35462 third-party-advisory
- sourceforge.net
- DSA-1064 vendor-advisory
- GLSA-200606-10 vendor-advisory
- 11920 vdb-entry
- RHSA-2009:1101 vendor-advisory
- RHSA-2009:1102 vendor-advisory
- 18050 vdb-entry
- 25159 vdb-entry
- ADV-2007-2732 vdb-entry
- bugzilla.redhat.com
- oval:org.mitre.oval:def:10069 signature vdb-entry
- Debian Security Tracker CVE-2004-2541 vendor-advisory
- bugs.debian.org issue-tracking