CVE-2009-0148: Buffer Overflow
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0148?
CVE-2009-0148 has a high severity due to its potential to allow remote code execution through multiple buffer overflow vulnerabilities.
How do I fix CVE-2009-0148?
To fix CVE-2009-0148, update Cscope to version 15.7 or later, which addresses the buffer overflow vulnerabilities.
Which versions of Cscope are affected by CVE-2009-0148?
CVE-2009-0148 affects Cscope versions 15.0bl2, 15.1, 15.3, 15.4, 15.5, 15.6, and prior to 15.7.
What types of input can exploit the CVE-2009-0148 vulnerability?
CVE-2009-0148 can be exploited using long strings in inputs such as source-code tokens and pathnames.
Is there a known fix for the vulnerabilities addressing CVE-2009-0148?
Yes, CVE-2009-0148 is related to an incomplete fix for CVE-2004-2541, and upgrading to the latest version is recommended.