| Package | Affected versions | Patched versions |
|---|---|---|
| cscope | = 13.0= 15.0bl2= 15.1= 15.3= 15.4= 15.5= 15.6= 15.7 |
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free