PT-2004-1055 · Cscope+1 · Cscope+1
Jason Duell
·
Publicado
2004-12-31
·
Atualizado
2024-06-15
·
CVE-2004-2541
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
cscope version 15.5
Description
The issue involves multiple vulnerabilities in the cscope package, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A buffer overflow in cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
Recommendations
For cscope version 15.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Cscope