JLSEC-2026-621 Thread-safety and out-of-bounds reads in the HTTP.jl content-type sniffer

Description The content-type sniffer had two memory/concurrency bugs. Number sniffing in isjson stored the strtod end-pointer out-parameter in a shared module-global VectorPtrUInt8; concurrent sniff calls on a multithreaded server raced on that single cell between the ccall and the subsequent rea...

MiracleLinux 3 : glibc-2.5-81.7.0.1.AXS3 (AXSA:2012-928:05)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-928:05 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make...

UBUNTU-CVE-2021-33797

Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when jsstrtod reads in floating point exponent, which leads to a buffer overflow in the pointer d...

PT-2023-12223

Name of the Vulnerable Software and Affected Versions Artifex MuJS versions 1.0.1 through 1.1.1 Description The issue is related to a buffer overflow in the jsdtoa.c file of Artifex MuJS. This occurs due to an integer overflow when the js strtod function reads in a floating point exponent, leadin...

SUSE: Security Advisory (SUSE-SU-2013:1251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2018-17396

Name of the Vulnerable Software and Affected Versions Artifex MuJS versions prior to 1.0.3 Description The issue is related to an integer overflow in the js strtod function due to incorrect exponent validation. Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resol...

Mac OS X 10.x 'libc/strtod(3)' Memory Corruption Vulnerability

source: http://www.securityfocus.com/bid/37687/info Mac OS X is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this issue to execute arbitrary code within the context of affected applications. Mac O...

SuSE 11.2 Security Update : glibc (SAT Patch Number 7110)

This collective update for the GNU C library glibc provides the following fixes : - Fix strtod integer/buffer overflows. bnc775690, CVE-2012-3480 - Fix vfprintf handling of many format specifiers. bnc770891, CVE-2012-3404 / CVE-2012-3405 / CVE-2012-3406 - Fix pthreadcondtimedwait stack unwinding...

SuSE 10 Security Update : glibc (ZYPP Patch Number 8387)

This update for GNU C library glibc fixes multiple integer overflows in strtod and related functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid63295;...

Ubuntu Update for eglibc USN-1589-1

Ubuntu Update for Linux kernel vulnerabilities USN-1589-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15891.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for eglibc USN-1589-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

GNU libc buffer overflow

Buffer overflow in strtod, strtof, strtold, and strtodl string functions...

glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

Integer overflow

Multiple integer overflows in the 1 strtod, 2 strtof, 3 strtold, 4 strtodl, and other unspecified "related functions" in stdlib in GNU C Library aka glibc or libc6 2.16 allow local users to cause a denial of service application crash and possibly execute arbitrary code via a long string, which...

PT-2012-1186 · Gnu +3 · Gnu C Library +3

Name of the Vulnerable Software and Affected Versions: GNU C Library aka glibc or libc6 version 2.16 Description: The issue is caused by multiple integer overflows in various functions, including strtod, strtof, strtold, and strtod l, within the stdlib component of the GNU C Library. This can lea...

MacOS X 10.5/10.6 libc/strtod(3) buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MacOS X 10.5/10.6 libc/strtod3 buffer overflow Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 08.01.2010 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected Software: - - MacOS 10.6...