CVE-2006-0459

Published: 29 March 2006

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.

Priority

Unknown

Status

Package Release Status
cyrus21-imapd
Launchpad, Ubuntu, Debian
Upstream Needs triage

flex
Launchpad, Ubuntu, Debian
Upstream Needs triage

flex-old
Launchpad, Ubuntu, Debian
Upstream Needs triage

gcc-3.3
Launchpad, Ubuntu, Debian
Upstream Needs triage

gcc-3.4
Launchpad, Ubuntu, Debian
Upstream Needs triage

gob2
Launchpad, Ubuntu, Debian
Upstream Needs triage

xine-extracodecs
Launchpad, Ubuntu, Debian
Upstream Needs triage

xine-lib
Launchpad, Ubuntu, Debian
Upstream Needs triage