CVE-2009-0148

HIGH · CVSS 9.3 EPSS 6.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-05-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-0148

Severity

HIGH

CVSS

9.3

EPSS

6.77%

Original NVD Description

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.