CVE-2010-3846

Publication date 5 November 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

Status

Package Ubuntu Release Status
cvs 10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper
Not affected