PT-2012-4175
CVE-2012-2676
·
Publicado
2012-07-25
·
Atualizado
2012-07-30
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Hoard versions prior to 3.9
Description
The issue is related to multiple integer overflows in the
malloc and calloc functions, which can be exploited by context-dependent attackers to perform memory-related attacks, such as buffer overflows, by providing a large size value. This causes less memory to be allocated than expected, potentially leading to security issues in implementing code.Recommendations
For versions prior to 3.9, update to version 3.9 or later to resolve the issue.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾