SUSE CVE-2010-3846

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

Heap overflow

Array index error in the applyrcschange function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow...

CVE-2010-3846

Summary of CVE-2010-3846 and CVS 1.11.23 : The issue is an array index error in the apply_rcs_change function (rcs.c) that can trigger a heap-based buffer overflow in CVS 1.11.23. This creates a condition for local users to gain privileges when processing delta fragments in RCS files. The vulnera...