CVE-2008-1994: Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1....

Security readout for executives and security teams

Acon versions 1.0.5-5 through 1.0.5-7 contain local stack buffer overflows. A user who can already run code on the machine could trigger memory corruption using an oversized HOME environment variable or terminal column count and potentially execute arbitrary code. The provided sources do not indicate remote exposure. Exposure is likely limited to systems with Acon 1.0.5-5 through 1.0.5-7 installed and accessible to local users. Internet-facing exposure is not supported by the provided evidence. Treat as a targeted local privilege and workstation/server hardening issue, not an internet emergency. Prioritize affected shared systems, multi-user servers, and environments where untrusted users have shell access. Mitigation focus: Inventory systems for Acon versions 1.0.5-5 through 1.0.5-7.; Check vendor or distribution advisories for fixed packages or removal guidance.; Remove Acon where it is not operationally required..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.