Lucene search

K
rubygemsRubySecRUBY:RUBY-2009-4124-60880
HistoryDec 06, 2009 - 9:00 p.m.

CVE-2009-4124 ruby: Heap-based buffer overflow in the rb_str_justify() function

2009-12-0621:00:00
RubySec
rubysec.com
8

Heap-based buffer overflow in the rb_str_justify function in
string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent
attackers to execute arbitrary code via unspecified vectors involving
(1) String#ljust, (2) String#center, or (3) String#rjust.

NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
rubyle1.8.-1
rubyge1.9.0
rubylt1.9.1.376