Lucene search

CVE-2008-2664

🗓️ 24 Jun 2008 19:00:41Reported by [email protected]Type

The rb_str_format function in Ruby 1.8.x and 1.9.0 before 1.9.0-2 allows attackers to trigger memory corruption via unspecified vectors, leading to inconsistent usage of multiple CVE identifiers related to Ruby

Reporter	Title	Published	Views	Family All 119
NVD	CVE-2008-2725	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2663	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2662	24 Jun 200819:41	–	nvd
NVD	CVE-2008-2727	2 Sep 200814:24	–	nvd
CVE	CVE-2008-2725	24 Jun 200819:41	–	cve
CVE	CVE-2008-2664	24 Jun 200819:41	–	cve
CVE	CVE-2008-2662	24 Jun 200819:41	–	cve
CVE	CVE-2008-2663	24 Jun 200819:41	–	cve
CVE	CVE-2008-2727	2 Sep 200814:24	–	cve
Prion	Memory corruption	24 Jun 200819:41	–	prion

Nvd

Node

ruby-lang rubyRange≤1.8.4

ruby-lang rubyRange1.8.5–1.8.5.231

ruby-lang rubyRange1.8.6–1.8.6.230

ruby-lang rubyRange1.8.7–1.8.7.22

ruby-lang rubyRange1.9.0–1.9.0.2

Node

debian debian_linuxMatch4.0

Node

canonical ubuntu_linuxMatch6.06lts

canonical ubuntu_linuxMatch7.04

canonical ubuntu_linuxMatch7.10

canonical ubuntu_linuxMatch8.04lts

Source	Link
debian	www.debian.org/security/2008/dsa-1618
mandriva	www.mandriva.com/security/advisories
secunia	www.secunia.com/advisories/31687
ubuntu	www.ubuntu.com/usn/usn-621-1
issues	www.issues.rpath.com/browse/RPL-2626
secunia	www.secunia.com/advisories/31181
secunia	www.secunia.com/advisories/31256
mandriva	www.mandriva.com/security/advisories
ruby-forum	www.ruby-forum.com/topic/157034
lists	www.lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2008 19:41Current

6.7Medium risk

Vulners AI Score6.7

CVSS27.8

EPSS0.02

CWE-399