CVE-2008-3916 Memory corruption in n/a
A heap-based buffer overflow in GNU ed allows attackers to execute arbitrary code via a long filename, primarily affecting systems where ed is invoked by other applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2008-3916?
CVE-2008-3916 is a critical memory corruption vulnerability in n/a, published on 4 Sep 2008. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component.
Weakness: CWE-119
Which versions are affected by CVE-2008-3916?
It affects 1 product.
Linux distribution packages (24)
ed Red Hat:enterprise_linux:2.1::as | All versions | 0:0.2-21.1 |
ed Red Hat:enterprise_linux:2.1::aw | All versions | 0:0.2-21.1 |
ed Red Hat:enterprise_linux:2.1::es | All versions | 0:0.2-21.1 |
ed Red Hat:enterprise_linux:2.1::ws | All versions | 0:0.2-21.1 |
ed Red Hat:enterprise_linux:3::as | All versions | 0:0.2-33.30E.1 |
ed-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:0.2-33.30E.1 |
ed Red Hat:enterprise_linux:3::desktop | All versions | 0:0.2-33.30E.1 |
ed-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:0.2-33.30E.1 |
ed Red Hat:enterprise_linux:3::es | All versions | 0:0.2-33.30E.1 |
ed-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:0.2-33.30E.1 |
ed Red Hat:enterprise_linux:3::ws | All versions | 0:0.2-33.30E.1 |
ed-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:0.2-33.30E.1 |
ed Red Hat:enterprise_linux:4::as | All versions | 0:0.2-36.el4_7.1 |
ed-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:0.2-36.el4_7.1 |
ed Red Hat:enterprise_linux:4::desktop | All versions | 0:0.2-36.el4_7.1 |
ed-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:0.2-36.el4_7.1 |
ed Red Hat:enterprise_linux:4::es | All versions | 0:0.2-36.el4_7.1 |
ed-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:0.2-36.el4_7.1 |
ed Red Hat:enterprise_linux:4::ws | All versions | 0:0.2-36.el4_7.1 |
ed-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:0.2-36.el4_7.1 |
ed Red Hat:enterprise_linux:5::client | All versions | 0:0.2-39.el5_2 |
ed-debuginfo Red Hat:enterprise_linux:5::client | All versions | 0:0.2-39.el5_2 |
ed Red Hat:enterprise_linux:5::server | All versions | 0:0.2-39.el5_2 |
ed-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:0.2-39.el5_2 |
Products include Gnu Ed.
How do I fix CVE-2008-3916?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2008-3916 being exploited?
There is no known exploitation of CVE-2008-3916 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2008-3916, GHSA-j55v-8789-5phj, RHSA-2008:0946.