VULNERABILITY INTELLIGENCE
CVE-2008-1994
CVSS score7.2 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2008-04-27
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer