PT-2010-1323

CVE-2009-4012

·

Publicado

2010-01-19

·

Atualizado

2010-03-26

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions LibThai versions prior to 0.1.13
Description The issue is related to multiple integer overflows that might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows. This is related to the thbrk/thbrk.c and thwbrk/thwbrk.c components.
Recommendations For versions prior to 0.1.13, update to version 0.1.13 or later to resolve the issue. As a temporary workaround, consider restricting the input length to prevent long strings from triggering heap-based buffer overflows.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
DSA-1971-1
OPENSUSE-SU-2024:10355-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾