{"id":"CVE-2006-4262","aliases":["DEBIAN-CVE-2006-4262","DSA-1186-1","EUVD-2006-4250","GHSA-xr3w-8pvj-85f8","RHSA-2009:1101","openSUSE-SU-2024:10705-1"],"status":"published","title":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a...","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03953,"percentile":0.9049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2006-08-23T10:00:00Z","modified":"2026-10-22T23:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"cscope","fixed_in":["15.5+cvs20060902-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cscope","fixed_in":["15.5+cvs20060902-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cscope","fixed_in":["15.5+cvs20060902-1"],"sources":["osv"]},{"ecosystem":"Debian:3.1","package":"cscope","fixed_in":["15.5-1.1sarge2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.5+cvs20060902-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.5+cvs20060902-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.5+cvs20060902-1"}]}]},{"source":"osv","ecosystem":"Debian:3.1","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.5-1.1sarge2"}]}],"versions":["15.5-1.1","15.5-1.1sarge1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-16.RHEL3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"cscope-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.5-10.RHEL4.3"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.9-1.9"}]}],"bundled":2}],"products":[{"vendor":"cscope","product":"cscope"}],"references":[{"url":"http://www.debian.org/security/2006/dsa-1186","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203645","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://secunia.com/advisories/21601","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28545","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.osvdb.org/28135","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=30266761\u0026forum_id=33500","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/22239","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/22515","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3374","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9661","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=30266760\u0026forum_id=33500","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/19686","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/19687","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-08.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.osvdb.org/28136","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28546","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4262","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xr3w-8pvj-85f8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-4262","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1101","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=203645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499174","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1101.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-2541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-2541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-4262","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4262","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-0148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0148","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1577","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2004-2541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4262","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2006-4262","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","status":"published","published":"2006-08-23T10:00:00Z","modified":"2024-08-07T19:06:06.603Z","updated_at":"2026-11-02T14:33:51.085765Z"}],"euvd":[{"id":"EUVD-2006-4250","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","status":"published","published":"2006-08-23T10:00:00Z","modified":"2024-08-07T19:06:06Z","updated_at":"2026-11-03T01:15:52.657645Z"}],"ghsa":[{"id":"GHSA-xr3w-8pvj-85f8","title":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a...","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","status":"published","published":"2022-05-01T07:17:03Z","modified":"2023-01-31T05:01:52Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:09.208669Z"}],"nvd":[{"id":"CVE-2006-4262","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","status":"published","published":"2006-08-23T10:04:00Z","modified":"2026-06-16T22:28:44.503Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:05.928789Z"}],"osv":[{"id":"CVE-2006-4262","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","status":"published","published":"2006-08-23T10:04:00Z","modified":"2026-04-10T03:37:43.77253Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2006-4262","description":"Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file list parsing, (2) long pathnames that result from path variable expansion such as tilde expansion for the HOME environment variable, and (3) a long -f (aka reffile) command line argument.","status":"published","published":"2006-08-23T10:04:00Z","modified":"2026-10-22T23:47:28.801270862Z","updated_at":"2026-11-02T15:45:23.105674Z"},{"id":"DSA-1186-1","title":"cscope","status":"published","published":"2006-09-30T00:00:00Z","modified":"2026-03-09T01:00:45.043661Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"openSUSE-SU-2024:10705-1","title":"cscope-15.9-1.9 on GA media","description":"These are all security issues fixed in the cscope-15.9-1.9 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:13:43.936561Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2009:1101","title":"Red Hat Security Advisory: cscope security update","status":"published","published":"2024-09-15T17:55:56Z","modified":"2026-06-26T10:11:22Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}