Cscope: Multiple buffer overflows

Cscope: Multiple buffer overflows Cscope is vulnerable to multiple buffer overflows that could lead to the execution of arbitrary code. cscope 2006-10-20 2006-10-20 144869 remote 15.5.20060927 15.5.20060927

Cscope is a developer's tool for browsing source code.

Unchecked use of strcpy() and *scanf() leads to several buffer overflows.

A user could be enticed to open a carefully crafted file which would allow the attacker to execute arbitrary code with the permissions of the user running Cscope.

There is no known workaround at this time.

All Cscope users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=dev-util/cscope-15.5.20060927"

CVE-2006-4262 falco falco