CVE-2009-0148

Published: May 5, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.

Affected (8)

Products: Cscope: Cscope

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cscope Cscope	Version 13.0
Cscope Cscope	Version 15.0bl2
Cscope Cscope	Version 15.1
Cscope Cscope	Version 15.3
Cscope Cscope	Version 15.4
Cscope Cscope	Version 15.5
Cscope Cscope	Version 15.6
Cscope Cscope	Version 15.7

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (44)

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/34978

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35074

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35213

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35214

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35462

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200905-02.xml

Source: cve@mitre.org

http://sourceforge.net/forum/forum.php?forum_id=947983

Source: cve@mitre.org

Patch

http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527

Source: cve@mitre.org

Patch

http://support.apple.com/kb/HT3549

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1806

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/05/06/9

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-1101.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-1102.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/34805

Source: cve@mitre.org

http://www.securitytracker.com/id?1022218

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2009/1238

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1297

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=490667

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34978

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35074

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35213

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35214

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35462

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200905-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/forum/forum.php?forum_id=947983

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sourceforge.net/mailarchive/forum.php?thread_name=E1LsGx3-00015K-TN%40ddv4jf1.ch3.sourceforge.com&forum_name=cscope-cvs

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?group_id=4664&release_id=679527

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://support.apple.com/kb/HT3549

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1806

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/05/06/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1102.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34805

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1022218

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2009/1238

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1297

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=490667

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9633

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.