CVE-2008-1994

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-27 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns.

Affected products

Ahmed Abdel-Hamid Mohamed Acon: 1.0.5-5, 1.0.5-6, 1.0.5-7

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603
http://secunia.com/advisories/29909
http://www.securityfocus.com/bid/28862
https://exchange.xforce.ibmcloud.com/vulnerabilities/41915
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475733
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476603
http://secunia.com/advisories/29909
http://www.securityfocus.com/bid/28862
https://exchange.xforce.ibmcloud.com/vulnerabilities/41915

Get alerted when CVE-2008-1994 or the next vulnerability affects your stack