RHSA-2009:1101: Moderate: cscope security update
cscope is a mature, ncurses-based, C source-code tree browsing tool.Multiple buffer overflow flaws were found in cscope. An attacker couldcreate a specially crafted source code file that could cause cscope tocrash or, possibly, execute arbitrary code when browsed with cscope.(CVE-2004-2541, CVE-2006-4262, CVE-2009-0148, CVE-2009-1577)All users of cscope are advised to upgrade to this updated package, whichcontains backported patches to fix these issues. All running instances ofcscope must be restarted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1101?
The severity of RHSA-2009:1101 is considered to be critical due to multiple buffer overflow flaws that could allow arbitrary code execution.
How do I fix RHSA-2009:1101?
To fix RHSA-2009:1101, you should update cscope to the latest version provided in the security advisory.
What are the potential impacts of RHSA-2009:1101?
The potential impacts of RHSA-2009:1101 include application crashes and the possibility of remote code execution.
Who is affected by RHSA-2009:1101?
Users running vulnerable versions of cscope are affected by RHSA-2009:1101.
Can RHSA-2009:1101 be exploited remotely?
Yes, RHSA-2009:1101 can be exploited remotely if an attacker crafts a malicious source code file.