Description
Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component.
References (12)
Core 12
Core References
Various Sources x_refsource_misc
http://www.ocert.org/analysis/2008-014/wordnet.patch
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44850
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/30958
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32184
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44851
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/495883/100/0/threaded
Various Sources x_refsource_misc
http://www.ocert.org/advisories/ocert-2008-014.html
Various Sources x_refsource_misc
http://www.ocert.org/analysis/2008-014/analysis.txt
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4217
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200810-01.xml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44849
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/44848
Scores
EPSS
0.0443
EPSS Percentile
90.3%
Details
CWE
CWE-119
Status
published
Products (1)
princeton_university/wordnet
3.0
Published
Sep 04, 2008
Tracked Since
Feb 18, 2026