BSD-based systems (FreeBSD, NetBSD, OpenBSD) index array overflow updated since 27.06.2009
Published:		08.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10021
Type:		library
Level:		8/10
Description:		Index array overflow in libc gdtoa() function (used by printf()).

Affected:		MOZILLA : SeaMonkey 1.1
		APPLE : MacOS X 10.5
		FREEBSD : FreeBSD 6.4
		FREEBSD : FreeBSD 7.2
		NETBSD : OpenBSD 4.5
		NETBSD : NetBSD 5.0
		MOZILLA : Firefox 3.5
		KDE : KDE 4.3
		OPERA : Opera 10.01
		KMELEON : K-Meleon 1.5
		FLOCK : Flock 2.5
		CAMINO : Camino 1.6
		APPLE : MacOS X 10.6
CVE:		CVE-2009-0689

Original document		Maksymilian Arciemowicz, MacOS X 10.5/10.6 libc/strtod(3) buffer overflow (08.01.2010)
		Maksymilian Arciemowicz, Camino 1.6.10 Remote Array Overrun (Arbitrary code execution) (15.12.2009)
		Maksymilian Arciemowicz, Flock 2.5.2 Remote Array Overrun (Arbitrary code execution) (15.12.2009)
		Maksymilian Arciemowicz, K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution) (20.11.2009)
		Maksymilian Arciemowicz, KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution) (20.11.2009)
		Maksymilian Arciemowicz, Opera 10.01 Remote Array Overrun (Arbitrary code execution) (20.11.2009)
		Maksymilian Arciemowicz, SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution) (20.11.2009)
		Maksymilian Arciemowicz, Firefox 3.5.3 Remote Array Overrun (UPDATE) (20.11.2009)
		Maksymilian Arciemowicz, [Full-disclosure] SecurityReason: Multiple Vendors libc/gdtoa printf(3) Array Overrun (27.06.2009)

Discuss:

Read or add your comments to this news (0 comments)