Unrated severityNVD Advisory· Published Mar 29, 2006· Updated Jun 16, 2026
CVE-2006-0459
CVE-2006-0459
Description
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:westes:flex:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:westes:flex:*:*:*:*:*:*:*:*range: <=2.5.32
- (no CPE)range: < 2.5.33
Patches
Vulnerability mechanics
References
14- secunia.com/advisories/19071nvdPatchVendor Advisory
- secunia.com/advisories/19424nvdPatchVendor Advisory
- www.osvdb.org/23440nvdBroken LinkPatch
- www.securityfocus.com/bid/16896nvdPatchThird Party AdvisoryVDB Entry
- www.us.debian.org/security/2006/dsa-1020nvdPatchVendor Advisory
- secunia.com/advisories/19126nvdVendor Advisory
- secunia.com/advisories/19228nvdVendor Advisory
- securityreason.com/securityalert/570nvdThird Party Advisory
- www.gentoo.org/security/en/glsa/glsa-200603-07.xmlnvdThird Party Advisory
- usn.ubuntu.com/260-1/nvdThird Party Advisory
- prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2nvdProduct
- sourceforge.net/mailarchive/forum.phpnvdRelease Notes
- www.vupen.com/english/advisories/2006/0770nvdBroken LinkURL Repurposed
- exchange.xforce.ibmcloud.com/vulnerabilities/24995nvdVDB Entry
News mentions
0No linked articles in our index yet.