PT-2000-1998 · Gnu · G+++1

Published 2000-11-01 · Updated 2008-09-05 · CVE-2000-1219

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gcc versions 3.3.3 and earlier g++ versions 3.3.3 and earlier

Description The issue is related to the -ftrapv compiler option in gcc and g++ which does not handle all types of integer overflows. This may leave applications vulnerable to issues related to overflows.

Recommendations For gcc versions 3.3.3 and earlier, consider updating the compiler to a newer version that properly handles integer overflows. For g++ versions 3.3.3 and earlier, consider updating the compiler to a newer version that properly handles integer overflows.

Fix

Related Identifiers

CVE-2000-1219

Affected Products

G++

Gcc

References · 6

• https://osv.dev/vulnerability/DEBIAN-CVE-2000-1219 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2000-1219 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2000-1219 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1219 · Security Note
• http://kb.cert.org/vuls/id/540517 · Note
• http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html · Note