Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:ed:0.9:*:*:*:*:*:*:*
part: a version: 0.9 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Ed (79e107e8-fe44-5c8b-a8ab-0f1b15c4586c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ed |
purl2cpe | 2026-06-01 10:11:53.856545 |
pkg:deb/ubuntu/ed |
purl2cpe | 2026-06-01 10:11:53.856547 |
pkg:github/dtung2008/ed |
purl2cpe | 2026-06-01 10:11:53.856548 |
pkg:github/happy5214/gnu-ed |
purl2cpe | 2026-06-01 10:11:53.856550 |
pkg:github/val-verde/ed |
purl2cpe | 2026-06-01 10:11:53.856551 |
pkg:gitlab/redhat/ed |
purl2cpe | 2026-06-01 10:11:53.856552 |
pkg:gnu/ed |
purl2cpe | 2026-06-01 10:11:53.856554 |
pkg:rpm/centos/ed |
purl2cpe | 2026-06-01 10:11:53.856555 |
pkg:rpm/fedora/ed |
purl2cpe | 2026-06-01 10:11:53.856557 |
pkg:rpm/opensuse/ed |
purl2cpe | 2026-06-01 10:11:53.856558 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3916 |
vulnerable | 2026-06-08 04:50:37.190962 |
Details available
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
Published: 2008-09-04T18:00:00.000Z
Updated: 2024-08-07T10:00:41.119Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.