CVE-2008-3916
Critical
Description
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
SeverityCritical
CVSS9.3
Exploit probability—
Product
Gnu Ed
PublishedSep 4, 2008
First seenSep 4, 2008
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu ed | 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.