PT-2012-1255

CVE-2005-4895

·

Published

2012-07-25

·

Updated

2012-08-09

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions gperftools versions prior to 0.4
Description The issue is related to multiple integer overflows in TCMalloc (tcmalloc.cc) that can be exploited by context-dependent attackers to perform memory-related attacks, such as buffer overflows. This occurs when a large size value is provided, resulting in less memory being allocated than expected.
Recommendations For versions prior to 0.4, update to version 0.4 or later to resolve the issue. As a temporary workaround, consider restricting the input size values to prevent large values from being processed by the vulnerable TCMalloc function.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾