CVE-2004-2541: Buffer Overflow
Apple Security Team reported multiple buffer overflows in cscope, caused by insecure sprintf usage. Processing a maliciously crafted source file with cscope may lead to an unexpected application termination or arbitrary code execution.
Other sources
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2004-2541?
CVE-2004-2541 is considered to have a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2004-2541?
To fix CVE-2004-2541, you should upgrade to the fixed version of cscope, specifically the remedy version 0:15.5-15.1.el5_3.1 or later.
What is the nature of the vulnerability described in CVE-2004-2541?
CVE-2004-2541 is a buffer overflow vulnerability that can be exploited by remote attackers through specially crafted C files.
Which versions of cscope are affected by CVE-2004-2541?
CVE-2004-2541 specifically affects cscope version 15.5.
Can CVE-2004-2541 be exploited locally?
CVE-2004-2541 is primarily a remote vulnerability, meaning it is exploited over a network rather than locally.