125 matches found
CVE-2009-4124
CVE-2009-4124 affects Ruby 1.9.x where a heap-based buffer overflow in rb_str_justify (string.c) allows context-dependent attackers to execute arbitrary code via String#ljust, String#center, or String#rjust. Affected versions are Ruby 1.9.1 prior to 1.9.1-p376. The vulnerability is classified wit...
CVE-2009-4124
Heap-based buffer overflow in the rbstrjustify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving 1 Stringljust, 2 Stringcenter, or 3 Stringrjust. NOTE: some of these details are obtained from third...
CVE-2009-4124 ruby: Heap-based buffer overflow in the rb_str_justify() function
Heap-based buffer overflow in the rbstrjustify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving 1 Stringljust, 2 Stringcenter, or 3 Stringrjust. NOTE: some of these details are obtained from third...
CVE-2007-4124
Cosminexus Component Container (Hitachi products) is affected for Cosminexus 6, 6.7, and 7 prior to 20070731. The session failover function may mishandle session data so one user’s session data could be used for another user, enabling remote authenticated access to sensitive information, possible...