PT-2006-2002 · Stlport · Stlport

Published 2006-03-02 · Updated 2022-07-19 · CVE-2006-0963

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions STLport version 5.0.2

Description The issue involves multiple buffer overflows that could potentially allow local users to execute arbitrary code. This is possible through long locale environment variables passed to a strcpy function call in c locale glibc2.c and through long arguments to unspecified functions in num put float.cpp.

Recommendations For STLport version 5.0.2, consider applying patches or updates that address the buffer overflows in c locale glibc2.c and num put float.cpp to prevent potential code execution. As a temporary workaround, consider restricting the length of locale environment variables and function arguments to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2006-0963

Affected Products

Stlport

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0963 · Security Note
• http://secunia.com/advisories/19051 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25159 · Note
• http://sourceforge.net/project/shownotes.php?release_id=397543 · Note
• http://vupen.com/english/advisories/2006/0800 · Note
• http://securityfocus.com/bid/16928 · Note