NVD

Id
59197  
Name
CVE-2006-0459  
Description
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-03-29  
Modified Date
2011-03-07  
Seq
2006-0459  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
304299 59197 CVE-2006-0459 http://prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2?download  View
304300 59197 CVE-2006-0459 570  View
304301 59197 CVE-2006-0459 [flex-announce] 20060222 flex 2.5.33 released  View
304302 59197 CVE-2006-0459 GLSA-200603-07  View
304303 59197 CVE-2006-0459 16896  View
304304 59197 CVE-2006-0459 USN-260-1  View
304305 59197 CVE-2006-0459 DSA-1020  View
304306 59197 CVE-2006-0459 ADV-2006-0770  View
304307 59197 CVE-2006-0459 flex-bypass-security(24995)  View

Related JVN