9.3
CVSSv2

CVE-2009-1577

Published: 07/05/2009 Updated: 29/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Multiple stack-based buffer overflows in the putstring function in find.c in Cscope prior to 15.6 allow user-assisted remote malicious users to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.

Vulnerable Product Search on Vulmon Subscribe to Product

cscope cscope 15.1

cscope cscope 15.3

cscope cscope 13.0

cscope cscope 15.0bl2

cscope cscope 15.4

cscope cscope

Vendor Advisories

Synopsis Moderate: cscope security update Type/Severity Security Advisory: Moderate Topic An updated cscope package that fixes multiple security issues is nowavailable for Red Hat Enterprise Linux 3 and 4This update has been rated as having moderate security impact by the RedHat Security Response Team ...