CVEvulnerability

CVE-2010-3846

6.9 MEDIUM Published 2010-11-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-11-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

Affected configurations

• nongnu cvs 1.11.23

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References