Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : libthai vulnerability (USN-887-1)

Tim Starling discovered that LibThai did not correctly handle long strings. A remote attacker could use specially-formed strings to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

USN-887-1: LibThai vulnerability

Tim Starling discovered that LibThai did not correctly handle long strings. A remote attacker could use specially-formed strings to execute arbitrary code with the user's privileges...

Mandriva Linux Security Advisory : libthai (MDVSA-2010:010)

Multiple vulnerabilities has been found and corrected in libthai : Tim Starling discovered that libthai, a set of Thai language support routines, is vulnerable of integer/heap overflow. This vulnerability could allow an attacker to run arbitrary code by sending a very long string CVE-2009-4012...

libthai integer overflow

Integer overflow on oversized strings...

[SECURITY] [DSA-1971-1] New libthai packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1971-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 15, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1971-1] New libthai packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1971-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 15, 2010 http://www.debian.org/security/faq -...

DSA-1971-1 libthai - arbitrary code execution

Bulletin has no description...

CVE-2009-4012

Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to 1 thbrk/thbrk.c and 2 thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information...