Vulnerability Description
Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ahmed Abdel-Hamid Mohamed | Acon | 1.0.5-5 |
Related Weaknesses (CWE)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603
- http://secunia.com/advisories/29909Vendor Advisory
- http://www.securityfocus.com/bid/28862
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41915
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603
- http://secunia.com/advisories/29909Vendor Advisory
- http://www.securityfocus.com/bid/28862
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41915
FAQ
What is CVE-2008-1994?
CVE-2008-1994 is a vulnerability with a CVSS score of 7.2 (HIGH). Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or...
How severe is CVE-2008-1994?
CVE-2008-1994 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1994?
Check the references section above for vendor advisories and patch information. Affected products include: Ahmed Abdel-Hamid Mohamed Acon.