Lucene search

CVE-2008-2664

🗓️ 24 Jun 2008 19:00:41Reported by mitreType

The rb_str_format function in Ruby 1.8.x allows attackers to trigger memory corruption via unspecified vectors related to alloca

Reporter	Title	Published	Views	Family All 119
Prion	Integer overflow	24 Jun 200819:41	–	prion
Prion	Memory corruption	24 Jun 200819:41	–	prion
Prion	Integer overflow	24 Jun 200819:41	–	prion
Prion	Integer overflow	24 Jun 200819:41	–	prion
Prion	Design/Logic Flaw	2 Sep 200814:24	–	prion
NVD	CVE-2008-2663	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2664	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2725	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2662	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2727	2 Sep 200814:24	–	nvd

Nvd

Node

ruby-lang rubyRange≤1.8.4

ruby-lang rubyRange1.8.5–1.8.5.231

ruby-lang rubyRange1.8.6–1.8.6.230

ruby-lang rubyRange1.8.7–1.8.7.22

ruby-lang rubyRange1.9.0–1.9.0.2

Node

debian debian_linuxMatch4.0

Node

canonical ubuntu_linuxMatch6.06lts

canonical ubuntu_linuxMatch7.04

canonical ubuntu_linuxMatch7.10

canonical ubuntu_linuxMatch8.04lts

Source	Link
secunia	www.secunia.com/advisories/31062
secunia	www.secunia.com/advisories/30831
secunia	www.secunia.com/advisories/30875
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/43348
mandriva	www.mandriva.com/security/advisories
secunia	www.secunia.com/advisories/31256
slackware	www.slackware.com/security/viewer.php
secunia	www.secunia.com/advisories/30802
ruby-lang	www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/
issues	www.issues.rpath.com/browse/RPL-2626

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2008 19:41Current

6.8Medium risk

Vulners AI Score6.8

CVSS27.8

EPSS0.007

CWE-399