CVE-2008-1994

HIGH · CVSS 7.2 EPSS 0.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-04-27 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-1994

Severity

HIGH

CVSS

7.2

EPSS

0.46%

Original Filing — NVD Description

Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns.