Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gcc:4.2.1:*:*:*:*:*:*:*

part: a version: 4.2.1 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGcc (f86718c9-ca49-524e-a508-2a40d3f289fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcc purl2cpe 2026-06-01 10:11:56.233019
pkg:deb/debian/gcc-10 purl2cpe 2026-06-01 10:11:56.233020
pkg:deb/ubuntu/gcc purl2cpe 2026-06-01 10:11:56.233021
pkg:deb/ubuntu/gcc-10 purl2cpe 2026-06-01 10:11:56.233023
pkg:github/gcc-mirror/gcc purl2cpe 2026-06-01 10:11:56.233024
pkg:gitlab/redhat/gcc purl2cpe 2026-06-01 10:11:56.233025
pkg:rpm/opensuse/gcc purl2cpe 2026-06-01 10:11:56.233027

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1685 vulnerable 2026-06-03 14:28:41.748788 Details available
gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer overflow attacks, and provide no diagnostic message about this removal. NOTE: the vendor has determined that this compiler behavior is correct according to section 6.5.6 of the C99 standard (aka ISO/IEC 9899:1999)
Published: 2008-04-06T23:00:00.000Z
Updated: 2024-08-07T08:32:01.285Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.