CVE-2009-0148

CVE-2009-0148 describes multiple buffer overflows in Cscope versions prior to 15.7a, stemming from an incomplete fix for a previous vulnerability. This flaw allows remote attackers to execute arbitrary code by supplying excessively long strings in inputs like source-code tokens or pathnames, sometimes involving integer overflows. With a CVSS score of 9.3 (Critical), the vulnerability has a network attack vector, medium attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.