CVE-2008-3908 — HIGH (10.0)

Vulnerability Description

Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Princeton University	Wordnet	3.0

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2008-3908?

CVE-2008-3908 is a vulnerability with a CVSS score of 10.0 (HIGH). Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or ...

How severe is CVE-2008-3908?

CVE-2008-3908 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-3908?

Check the references section above for vendor advisories and patch information. Affected products include: Princeton University Wordnet.