PT-2008-3662 · Princeton University · Wordnet
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Wordnet versions 2.0 through 3.0
Description
A stack-based buffer overflow issue exists in the searchwn function, potentially allowing attackers to execute arbitrary code via a long command line option. This issue is unlikely to cross privilege boundaries, except when Wordnet is used as a back end.
Recommendations
For versions 2.0 through 3.0, consider restricting the use of the searchwn function until a patch is available. As a temporary workaround, avoid using long command line options with the searchwn function to minimize the risk of exploitation.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wordnet