CVEvulnerability

CVE-2006-4262

5.1 MEDIUM Published 2006-08-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.

Affected configurations

• cscope cscope (<= 15.5)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References