Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka dat...
Product
debian/wordnet vulnerabilities
4 published CVES affecting debian/wordnet, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unscored
- 2
- CISA KEV
- 0
Latest debian/wordnet CVEs
Newest publication first
-
HighCVSS 10.0 EPSS 4.4%
-
DTSA-163-1 wordnet - several overflows
PublishedUnknown -
Unknown
-
HighCVSS 7.5 EPSS 4.1%
Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is us...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.