PT-2008-2803 · Simtel · Programmer'S Notepad

Publicado 2008-03-08 · Atualizado 2017-08-08 · CVE-2008-1210

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Programmer's Notepad versions prior to 2.0.8.718

Description The issue is related to a stack-based buffer overflow in the ctags parsing code. This can be exploited by user-assisted remote attackers using a crafted .c file, potentially leading to a denial of service (application crash) or the execution of arbitrary code when the victim selects the Jump To dialog.

Recommendations For versions prior to 2.0.8.718, update to version 2.0.8.718 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Jump To dialog with untrusted .c files until the update is applied.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1210

Produtos afetados

Programmer'S Notepad

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-1210 · Nota de Segurança
• http://secunia.com/advisories/29233 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=581499&group_id=45545 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41022 · Nota
• http://securityfocus.com/bid/28119 · Nota