CVE-2009-0689 : 상세 정보

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 33480

게시일 : 2010-01-07 23h00 +00:00
저자 : Maksymilian Arciemowicz
EDB 검증됨 : Yes

Exploit Database EDB-ID : 33312

게시일 : 2009-10-26 23h00 +00:00
저자 : Alin Rad Pop
EDB 검증됨 : Yes

Exploit Database EDB-ID : 33364

게시일 : 2009-11-19 23h00 +00:00
저자 : Maksymilian Arciemowicz
EDB 검증됨 : Yes

Exploit Database EDB-ID : 33058

게시일 : 2009-05-25 22h00 +00:00
저자 : Maksymilian Arciemowicz
EDB 검증됨 : Yes

Exploit Database EDB-ID : 33363

게시일 : 2009-11-19 23h00 +00:00
저자 : Maksymilian Arciemowicz
EDB 검증됨 : Yes

Exploit Database EDB-ID : 33479

게시일 : 2010-01-07 23h00 +00:00
저자 : Maksymilian Arciemowicz
EDB 검증됨 : Yes

Exploit Database EDB-ID : 10380

게시일 : 2009-12-10 23h00 +00:00
저자 : Maksymilian Arciemowicz & sp3x
EDB 검증됨 : No

언급된 제품

구성 0

K-meleon_project>>K-meleon >> Version 1.5.3

Mozilla>>Firefox >> Version 3.0.1

Mozilla>>Firefox >> Version 3.0.2

Mozilla>>Firefox >> Version 3.0.3

Mozilla>>Firefox >> Version 3.0.4

Mozilla>>Firefox >> Version 3.0.5

Mozilla>>Firefox >> Version 3.0.6

Mozilla>>Firefox >> Version 3.0.7

Mozilla>>Firefox >> Version 3.0.8

Mozilla>>Firefox >> Version 3.0.9

Mozilla>>Firefox >> Version 3.0.10

Mozilla>>Firefox >> Version 3.0.11

Mozilla>>Firefox >> Version 3.0.12

Mozilla>>Firefox >> Version 3.0.13

Mozilla>>Firefox >> Version 3.0.14

Mozilla>>Firefox >> Version 3.5

Mozilla>>Firefox >> Version 3.5.1

Mozilla>>Firefox >> Version 3.5.2

Mozilla>>Firefox >> Version 3.5.3

Mozilla>>Seamonkey >> Version 1.1.8

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 7.2

Freebsd>>Freebsd >> Version 7.2

Freebsd>>Freebsd >> Version 7.2

Netbsd>>Netbsd >> Version 5.0

Openbsd>>Openbsd >> Version 4.5

참고 자료