CVE-2006-4262
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a...
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
- Record
CVE-2006-4262- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
- Record
CVE-2006-4262- Updated
- 2026-11-02
EUVDEUVD-2006-4250 No score
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
- Record
EUVD-2006-4250- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xr3w-8pvj-85f8 No score
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a...
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
- Record
GHSA-xr3w-8pvj-85f8- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
- Record
CVE-2006-4262- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4262 No score
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.
- Record
DEBIAN-CVE-2006-4262- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10705-1 No score
cscope-15.9-1.9 on GA media
These are all security issues fixed in the cscope-15.9-1.9 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10705-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cscopeDebian:12 |
before 15.5+cvs20060902-1 | 15.5+cvs20060902-1 |
cscopeDebian:13 |
before 15.5+cvs20060902-1 | 15.5+cvs20060902-1 |
cscopeDebian:14 |
before 15.5+cvs20060902-1 | 15.5+cvs20060902-1 |
cscopeDebian:3.1 |
before 15.5-1.1sarge2, plus listed versions 15.5-1.115.5-1.1sarge1 |
15.5-1.1sarge2 |
cscopeRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscope-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscopeRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscope-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscopeRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscope-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cscopeRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscope-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 0:15.5-16.RHEL3 | 0:15.5-16.RHEL3 |
cscopeRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscope-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscopeRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscope-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscopeRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscope-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscopeRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscope-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:15.5-10.RHEL4.3 | 0:15.5-10.RHEL4.3 |
cscopeopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 15.9-1.9 | 15.9-1.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4262 is a medium vulnerability (CVSS 5.1) in Cscope, published August 23, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.95%, the 90th percentile. Fixed in cscope 15.5+cvs20060902-1.
References
debian.org/security/2006/dsa-1186
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645
secunia.com/advisories/21601
exchange.xforce.ibmcloud.com/vulnerabilities/28545
redhat.com/support/errata/RHSA-2009-1101.html
osvdb.org/28135
Show 33 moreShow less
sourceforge.net/mailarchive/forum.php?thread_id=30266761&forum_id=33500
vupen.com/english/advisories/2006/3374
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661
securityfocus.com/bid/19686
security.gentoo.org/glsa/glsa-200610-08.xml
nvd.nist.gov/vuln/detail/CVE-2006-4262
github.com/advisories/GHSA-xr3w-8pvj-85f8
security-tracker.debian.org/tracker/CVE-2006-4262
access.redhat.com/errata/RHSA-2009:1101
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1101.json
cve.org/CVERecord?id=CVE-2004-2541
suse.com/security/cve/CVE-2004-2541