Vendor/product archive

redhat / cygwin CVEs

Beta · best-effort

2 CVEs tagged to redhat / cygwin — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to redhat vendor archive

CVE-2008-3323

Published Jul 28, 2008

setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arb…

CVSS 7.6 · High

Vendor/product tagsBeta · best-effort

CVE-2007-6181

Published Nov 30, 2007

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonst…

CVSS 8.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1