PT-2008-4107 · Ruby Lang+3 · Ruby+11
Drew Yao
·
Publicado
2008-06-24
·
Atualizado
2018-11-01
·
CVE-2008-2662
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Multiple integer overflows in the rb str buf append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ruby
Debian
Irb
Ruby-Devel
Ruby-Docs
Ruby-Irb
Ruby-Libs
Ruby-Mode
Ruby-Rdoc
Ruby-Ri
Ruby-Tcltk
Ubuntu