CVE-2008-3908

Publication date 4 September 2008

Last updated 24 July 2024

Ubuntu priority

Description

Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
wordnet	9.10 karmic	Fixed 1:3.0-11ubuntu0.1
	9.04 jaunty	Fixed 1:3.0-11ubuntu0.1
	8.10 intrepid	Fixed 1:3.0-11ubuntu0.1
	8.04 LTS hardy	Fixed 1:3.0-6ubuntu0.1
	7.10 gutsy	Ignored end of life, was needed
	7.04 feisty	Fixed 1:2.1-4ubuntu0.1
	6.06 LTS dapper	Ignored end of life

Notes

jdstrand

per Debian-- 1:3.0-12 had a regression and the patch was slightly updated by 1:3.0-13 to fix this bug

References

Other references

https://www.cve.org/CVERecord?id=CVE-2008-3908