CVE-2008-3908 - CVE House
Back to Database
Status published Critical CVE-2008-3908

Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent...

Vulnerability Description

Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR, (3) WNHOME, or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges, this issue only crosses privilege boundaries when WordNet is invoked as a third party component.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3908

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

princeton university

View all reports →

Affected Software

wordnet
Vulnerable Versions:
3.0

Timeline

Official Publish: September 4th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.