Arbitrary Code Execution

exuberant-ctags is vulnerable to Arbitrary Code Execution. The vulnerability exists due to the improper handling of the "-o" option in externalSortTags of sort.c, allowing an attacker to inject and execute malicious code...

Design/Logic Flaw

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

Ctags 操作系统命令注入漏洞

Ctags is Sourceforge open source for generating indexed files from a program's source code tree, thus facilitating text editors to achieve rapid location of the utility. Ctags has a security vulnerability that originates from externalSortTags in sort.c calling the system3 function in an unsafe...

Integer overflow

Integer overflow in the keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service application crash or possibly have unspecified other impact via long strings...

CVE-2015-4042

CVE-2015-4042 affects GNU Coreutils (sort) up to version 8.23, where the keycompare_mb function in sort.c uses a size calculation that does not account for multibyte characters. This can allow a specially crafted long UTF-8 string to trigger an integer overflow, potentially causing a denial of se...

CVE-2015-4042

Integer overflow in the keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service application crash or possibly have unspecified other impact via long strings...

Multiple buffer overflow vulnerabilities in GNU Coreutils 'src/sort.c'

GNU Core Utilities is a collection of some basic system administration tools provided by the GNU organization. Multiple buffer overflow vulnerabilities exist in GNU Coreutils. An attacker can exploit the vulnerabilities to execute arbitrary code in the context of the affected application...