CVE-2010-3846

CVE-2010-3846 describes a heap-based buffer overflow vulnerability in CVS 1.11.23, specifically within the apply_rcs_change function in rcs.c. This flaw allows local users to potentially gain privileges by providing a specially crafted RCS file with malicious delta fragment changes. With a CVSS score of 6.9, this vulnerability is considered high severity, requiring local access and medium attack complexity, but potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.