CVE-2008-3916
EUVD-2008-390104.09.2008, 18:41
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnu | ed | 0.2 |
| gnu | ed | 0.3 |
| gnu | ed | 0.4 |
| gnu | ed | 0.5 |
| gnu | ed | 0.6 |
| gnu | ed | 0.7 |
| gnu | ed | 0.8 |
| gnu | ed | 0.9 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References