PT-2008-2803 · Simtel · Programmer'S Notepad

Published 2008-03-08 · Updated 2017-08-08 · CVE-2008-1210

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Programmer's Notepad versions prior to 2.0.8.718

Description The issue is related to a stack-based buffer overflow in the ctags parsing code. This can be exploited by user-assisted remote attackers using a crafted .c file, potentially leading to a denial of service (application crash) or the execution of arbitrary code when the victim selects the Jump To dialog.

Recommendations For versions prior to 2.0.8.718, update to version 2.0.8.718 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Jump To dialog with untrusted .c files until the update is applied.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1210

Affected Products

Programmer'S Notepad

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-1210 · Security Note
• http://secunia.com/advisories/29233 · Note
• http://sourceforge.net/project/shownotes.php?release_id=581499&group_id=45545 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41022 · Note
• http://securityfocus.com/bid/28119 · Note