NVD

Id
48846  
Name
CVE-2009-1577  
Description
Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-05-07  
Modified Date
2010-08-21  
Seq
2009-1577  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246789 48846 CVE-2009-1577 http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?r1=1.18&r2=1.19  View
246790 48846 CVE-2009-1577 http://cscope.cvs.sourceforge.net/viewvc/cscope/cscope/src/find.c?view=log#rev1.19  View
246791 48846 CVE-2009-1577 http://cvs.fedoraproject.org/viewvc/rpms/cscope/devel/cscope-15.5-putstring-overflow.patch  View
246792 48846 CVE-2009-1577 oval:org.mitre.oval:def:9837  View
246793 48846 CVE-2009-1577 GLSA-200905-02  View
246794 48846 CVE-2009-1577 [oss-security] 20090505 Old cscope buffer overflow  View
246795 48846 CVE-2009-1577 [oss-security] 20090506 Re: Old cscope buffer overflow  View
246796 48846 CVE-2009-1577 [oss-security] 20090506 Re: Old cscope buffer overflow  View
246797 48846 CVE-2009-1577 RHSA-2009:1101  View
246798 48846 CVE-2009-1577 cscope-findc-bo(50366)  View
246799 48846 CVE-2009-1577 https://bugzilla.redhat.com/show_bug.cgi?id=189666  View
246800 48846 CVE-2009-1577 https://bugzilla.redhat.com/show_bug.cgi?id=499174  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40830 JVNDB-2009-001836 Cscope の putstring 関数におけるスタックベースのバッファオーバーフローの脆弱性 Cscope の putstring 関数には、ソースコード内の長大な関数名および symbol の処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-1577 39008 CVE-2009-1577 48846 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001836.html 2009-05-07 2009-08-03 View