CVE-2009-0689：詳細資料

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

相關弱點

指標

EPSS

EPSS 評分

EPSS 百分位數

漏洞利用資訊

Exploit Database EDB-ID : 33480

發布日期 : 2010-01-07 23h00 +00:00
作者 : Maksymilian Arciemowicz
EDB 已驗證 : Yes

Exploit Database EDB-ID : 33312

發布日期 : 2009-10-26 23h00 +00:00
作者 : Alin Rad Pop
EDB 已驗證 : Yes

Exploit Database EDB-ID : 33364

發布日期 : 2009-11-19 23h00 +00:00
作者 : Maksymilian Arciemowicz
EDB 已驗證 : Yes

Exploit Database EDB-ID : 33058

發布日期 : 2009-05-25 22h00 +00:00
作者 : Maksymilian Arciemowicz
EDB 已驗證 : Yes

Exploit Database EDB-ID : 33363

發布日期 : 2009-11-19 23h00 +00:00
作者 : Maksymilian Arciemowicz
EDB 已驗證 : Yes

Exploit Database EDB-ID : 33479

發布日期 : 2010-01-07 23h00 +00:00
作者 : Maksymilian Arciemowicz
EDB 已驗證 : Yes

Exploit Database EDB-ID : 10380

發布日期 : 2009-12-10 23h00 +00:00
作者 : Maksymilian Arciemowicz & sp3x
EDB 已驗證 : No

相關產品

設定 0

K-meleon_project>>K-meleon >> Version 1.5.3

Mozilla>>Firefox >> Version 3.0.1

Mozilla>>Firefox >> Version 3.0.2

Mozilla>>Firefox >> Version 3.0.3

Mozilla>>Firefox >> Version 3.0.4

Mozilla>>Firefox >> Version 3.0.5

Mozilla>>Firefox >> Version 3.0.6

Mozilla>>Firefox >> Version 3.0.7

Mozilla>>Firefox >> Version 3.0.8

Mozilla>>Firefox >> Version 3.0.9

Mozilla>>Firefox >> Version 3.0.10

Mozilla>>Firefox >> Version 3.0.11

Mozilla>>Firefox >> Version 3.0.12

Mozilla>>Firefox >> Version 3.0.13

Mozilla>>Firefox >> Version 3.0.14

Mozilla>>Firefox >> Version 3.5

Mozilla>>Firefox >> Version 3.5.1

Mozilla>>Firefox >> Version 3.5.2

Mozilla>>Firefox >> Version 3.5.3

Mozilla>>Seamonkey >> Version 1.1.8

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 6.4

Freebsd>>Freebsd >> Version 7.2

Freebsd>>Freebsd >> Version 7.2

Freebsd>>Freebsd >> Version 7.2

Netbsd>>Netbsd >> Version 5.0

Openbsd>>Openbsd >> Version 4.5

參考資料