CVE-2006-4262

Publication date 23 August 2006

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
cscope 9.10 karmic
Fixed 15.5+cvs20060902-3
9.04 jaunty
Fixed 15.5+cvs20060902-3
8.10 intrepid
Fixed 15.5+cvs20060902-3
8.04 LTS hardy
Fixed 15.5+cvs20060902-3
7.10 gutsy
Fixed 15.5+cvs20060902-3
7.04 feisty
Fixed 15.5+cvs20060902-3
6.10 edgy
Fixed 15.5+cvs20060902-3
6.06 LTS dapper Ignored end of life