Candidate: CVE-2009-0148 PublicDate: 2009-05-05 17:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0148 Description: Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_cscope: upstream_cscope: released (15.7a) dapper_cscope: ignored (reached end-of-life) hardy_cscope: ignored (reached end-of-life) intrepid_cscope: released (15.6-6+lenny1build0.8.10.1) jaunty_cscope: released (15.6-6+lenny1build0.9.04.1) karmic_cscope: not-affected (15.7a-1) lucid_cscope: not-affected (15.7a-1) maverick_cscope: not-affected (15.7a-1) natty_cscope: not-affected (15.7a-1) oneiric_cscope: not-affected (15.7a-1) devel_cscope: not-affected (15.7a-1)