debian/cscope vulnerabilities

Latest debian/cscope CVEs

Newest publication first

1. DSA-1806-1 cscope - arbitrary code execution

   Published 2009-05-24

   Unknown

2. CVE-2009-1577 Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbo...

   Published 2009-05-07

   High·CVSS 9.3

   Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.

3. CVE-2009-0148 Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflo...

   Published 2009-05-05

   High·CVSS 9.3

   Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2...

4. DSA-1186-1 cscope

   Published 2006-09-30

   Unknown

5. CVE-2006-4262 Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pa...

   Published 2006-08-23

   Medium·CVSS 5.1

   Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames...

6. DSA-1064-1 cscope - buffer overflows

   Published 2006-05-19

   Unknown

7. CVE-2004-2541 Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.

   Published 2005-11-20

   Medium·CVSS 6.9

   Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.

8. DSA-610-1 cscope - insecure temporary file

   Published 2004-12-17

   Unknown

9. CVE-2004-0996 main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

   Published 2004-12-01

   Low·CVSS 2.1 EPSS 1.1%

   main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.