RHSA-2009:1102: Moderate: cscope security update
cscope is a mature, ncurses-based, C source-code tree browsing tool.Multiple buffer overflow flaws were found in cscope. An attacker couldcreate a specially crafted source code file that could cause cscope tocrash or, possibly, execute arbitrary code when browsed with cscope.(CVE-2004-2541, CVE-2009-0148)All users of cscope are advised to upgrade to this updated package, whichcontains backported patches to fix these issues. All running instances ofcscope must be restarted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1102?
The severity of RHSA-2009:1102 is classified as moderate.
How do I fix RHSA-2009:1102?
To fix RHSA-2009:1102, you need to update cscope to version 15.5-15.1.el5_3.1 or later.
What vulnerabilities are addressed in RHSA-2009:1102?
RHSA-2009:1102 addresses multiple buffer overflow vulnerabilities in cscope.
What could happen if I am affected by RHSA-2009:1102?
If affected by RHSA-2009:1102, an attacker could potentially crash cscope or execute arbitrary code.
Which systems are impacted by RHSA-2009:1102?
RHSA-2009:1102 impacts systems running cscope versions prior to 15.5-15.1.el5_3.1 on both el5_3 and el5_3 x86_64 architectures.