logo

Database

Out-of-bounds read In mono

Description

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 15

10

Aliases

1. CVE-2009-06892. NVD-2009-06893. OSV-DEBIAN-2009-06894. OSV-2009-06895. SECURITY-TRACKER-CVE-2009-0689

References

1. https://www.exploit-db.com/exploits/101862. https://www.exploit-db.com/exploits/101873. https://www.exploit-db.com/exploits/101854. https://www.exploit-db.com/exploits/101845. https://www.exploit-db.com/exploits/334806. https://www.exploit-db.com/exploits/333127. https://www.exploit-db.com/exploits/333648. https://www.exploit-db.com/exploits/330589. https://www.exploit-db.com/exploits/3336310. https://www.exploit-db.com/exploits/3347911. https://github.com/Fullmetal5/str2hax

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.