libthai integer overflow
Published:		17.01.2010
Source:		BUGTRAQ
SecurityVulns ID:		10524
Type:		library
Level:		4/10
Description:		Integer overflow on oversized strings.

Affected:		LIBTHAI : libthai 0.1
CVE:		CVE-2009-4012 (Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.)

Original document

DEBIAN, [SECURITY] [DSA-1971-1] New libthai packages fix arbitrary code execution (17.01.2010)

Discuss:

Read or add your comments to this news (0 comments)