Ruby DoS
Published:		29.06.2009
Source:		BUGTRAQ
SecurityVulns ID:		10024
Type:		library
Level:		5/10
Description:		Crash on oversized string in BigDecimal.

Affected:		RUBY : ruby 1.8
CVE:		CVE-2009-1904 (The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service (application crash) via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type.)

Original document

GENTOO, [Full-disclosure] [ GLSA 200906-02 ] Ruby: Denial of Service (29.06.2009)

Discuss:

Read or add your comments to this news (0 comments)