CVE-2008-2149 Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue pro...
HighCVSS 7.5
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordnet | = 2.0 | No fix listed |
| wordnet | = 2.1 | No fix listed |
| wordnet | = 3.0 | No fix listed |
| debian/wordnet(Debian:12) | < 1:3.0-10 | 1:3.0-10 |
| debian/wordnet(Debian:13) | < 1:3.0-10 | 1:3.0-10 |
| debian/wordnet(Debian:14) | < 1:3.0-10 | 1:3.0-10 |
References
- 30242 third-party-advisory
- 31654 third-party-advisory
- 32184 third-party-advisory
- DSA-1634 vendor-advisory
- GLSA-200810-01 vendor-advisory
- MDVSA-2008:182 vendor-advisory
- 29208 vdb-entry
- ADV-2008-1527 vdb-entry
- bugs.gentoo.org exploit
- wordnet-searchwn-bo(42378) vdb-entry
- Debian Security Tracker CVE-2008-2149 vendor-advisory
- bugs.debian.org issue-tracking