Approved changes feed: RSS · Atom
cpe:2.3:a:cscope:cscope:15.5:*:*:*:*:*:*:*part: a version: 15.5 update: *
| Vendor | Cscope (eca0c697-4d6e-50ea-8449-39883925e1aa) |
|---|---|
| Product | Cscope (55e91938-df75-5cd5-b593-f245cfca5d86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/cscope |
purl2cpe | 2026-06-01 10:16:34.466566 |
pkg:deb/ubuntu/cscope |
purl2cpe | 2026-06-01 10:16:34.466567 |
pkg:github/portante/cscope |
purl2cpe | 2026-06-01 10:16:34.466569 |
pkg:rpm/fedora/cscope |
purl2cpe | 2026-06-01 10:16:34.466570 |
pkg:rpm/opensuse/cscope |
purl2cpe | 2026-06-01 10:16:34.466572 |
pkg:sourceforge/cscope |
purl2cpe | 2026-06-01 10:16:34.466573 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0148 |
vulnerable | 2026-06-08 04:51:07.844641 |
Details available
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T04:24:17.619Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2541 |
vulnerable | 2026-06-08 04:48:10.092624 |
Details available
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
Published: 2005-11-20T21:00:00.000Z
Updated: 2024-08-08T01:29:14.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0996 |
vulnerable | 2026-06-08 04:47:52.239543 |
Details available
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.654Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.