Mandrake Security Advisory MDVSA-2009:160 (ruby)

The remote host is missing an update to ruby announced via advisory MDVSA-2009:160. OpenVAS Vulnerability Test $Id: mdksa2009160.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:160 ruby Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Linux Security Advisory : ruby (MDVSA-2009:160)

The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service application crash via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type. This update corrects th...