CVE-2006-0459
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 4.7%
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.
Productos afectados
n/a · n/aReferencias
http://prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2?downloadhttp://secunia.com/advisories/19071http://secunia.com/advisories/19126http://secunia.com/advisories/19228http://secunia.com/advisories/19424http://securityreason.com/securityalert/570https://exchange.xforce.ibmcloud.com/vulnerabilities/24995http://sourceforge.net/mailarchive/forum.php?thread_name=20060223020346.GA11231%40tabitha.home.tldz.org&forum_name=flex-announcehttps://usn.ubuntu.com/260-1/http://www.gentoo.org/security/en/glsa/glsa-200603-07.xmlhttp://www.osvdb.org/23440http://www.securityfocus.com/bid/16896