Multiple BSD and Linux systems strfmon() libc / glibc function integer overflow updated since 27.03.2008
Published:		18.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		8843
Type:		library
Level:		7/10
Description:		Integer overflow on format specificator in strfmon(). NULL pointer dereference in printf().

Affected:		GNU : glibc 2.10
CVE:		CVE-2008-1391

Original document		Maksymilian Arciemowicz, SecurityReason: glibc x<=2.10.1 stdio/strfmon.c Multiple vulnerabilities (18.09.2009)
		Christos Zoulas, Re: [securityreason] *BSD libc (strfmon) Multiple vulnerabilities (28.03.2008)
		Maksymilian Arciemowicz, [securityreason] *BSD libc (strfmon) Multiple vulnerabilities (27.03.2008)

Discuss:

Read or add your comments to this news (0 comments)