Unrated severityNVD Advisory· Published Mar 29, 2006· Updated Apr 16, 2026
CVE-2006-0459
CVE-2006-0459
Description
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
14- secunia.com/advisories/19071nvdPatchVendor Advisory
- secunia.com/advisories/19424nvdPatchVendor Advisory
- www.osvdb.org/23440nvdBroken LinkPatch
- www.securityfocus.com/bid/16896nvdPatchThird Party AdvisoryVDB Entry
- www.us.debian.org/security/2006/dsa-1020nvdPatchVendor Advisory
- secunia.com/advisories/19126nvdVendor Advisory
- secunia.com/advisories/19228nvdVendor Advisory
- securityreason.com/securityalert/570nvdThird Party Advisory
- www.gentoo.org/security/en/glsa/glsa-200603-07.xmlnvdThird Party Advisory
- usn.ubuntu.com/260-1/nvdThird Party Advisory
- prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2nvdProduct
- sourceforge.net/mailarchive/forum.phpnvdRelease Notes
- www.vupen.com/english/advisories/2006/0770nvdBroken LinkURL Repurposed
- exchange.xforce.ibmcloud.com/vulnerabilities/24995nvdVDB Entry
News mentions
0No linked articles in our index yet.