CVE-2006-4262

cscope < 15.5 - Buffer Overflow via Long Pathname or Command Line Argument

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.

References (17)

Core 17
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1186
Patch, Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21601
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28545
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1101.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28135
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22239
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22515
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3374
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19686
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19687
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200610-08.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28136
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28546

Scores

EPSS 0.0365
EPSS Percentile 88.3%

Details

CWE
CWE-119
Status published
Products (1)
cscope/cscope < 15.5
Published Aug 23, 2006
Tracked Since Feb 18, 2026