[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-2541Date: (C)2004-12-31   (M)2023-12-22


Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.9
Exploit Score: 3.4
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
OSVDB-11920
SECUNIA-13237
BID-18050
SECUNIA-20191
SECUNIA-20564
BID-25159
SECUNIA-26235
SECUNIA-35462
ADV-2007-2732
APPLE-SA-2007-07-31
DSA-1064
GLSA-200606-10
RHSA-2009:1101
RHSA-2009:1102
http://docs.info.apple.com/article.html?artnum=306172
http://sourceforge.net/tracker/index.php?func=detail&aid=1064875&group_id=4664&atid=104664
https://bugzilla.redhat.com/show_bug.cgi?id=490667
oval:org.mitre.oval:def:10069

CWE    1
CWE-119
OVAL    6
oval:org.secpod.oval:def:200437
oval:org.secpod.oval:def:500702
oval:org.secpod.oval:def:500516
oval:org.secpod.oval:def:200555
...

© SecPod Technologies