Buffer overflow in Cscope

CVE-2009-1577

Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.

Vulnerability class: Buffer Overflow

EPSS: 0.075 (93.8th percentile) — read the EPSS interpretation.

Affected products

  • Cscope — versions 13.0, 15.0bl2, 15.1
  • N/a — versions n/a

Weakness classification (CWE)

References