CVE-2008-1994

https://notcve.org/view.php?id=CVE-2008-1994

Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns. Múltiples desbordamientos de búfer basados en la pila en (a) acon.c, (b) menu.c, y (c) child.c en Acon 1.0.5-5 a 1.0.5.7 permiten a usuarios locales ejecutar código de su elección mediante (1) una variable de entorno HOME larga, o (2) un gran número de columnas de terminal. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603 http://secunia.com/advisories/29909 http://www.securityfocus.com/bid/28862 https://exchange.xforce.ibmcloud.com/vulnerabilities/41915 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •