CVE-2004-2541: Cscope

Medium severity, CVSS 6.9. EPSS: 1.7% chance of exploitation in the next 30 days.

Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.

Affected products

• Cscope Cscope: version 15.5 only

Published 2004-12-31. Last modified 2026-06-16.