mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 00:49:28 +02:00
0xMarcio
32 lines
1.9 KiB
Markdown
32 lines
1.9 KiB
Markdown
### [CVE-2009-0689](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0689)
|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- http://securityreason.com/achievement_securityalert/69
|
|
- http://securityreason.com/achievement_securityalert/71
|
|
- http://securityreason.com/achievement_securityalert/72
|
|
- http://securityreason.com/achievement_securityalert/73
|
|
- http://securityreason.com/achievement_securityalert/75
|
|
- http://securityreason.com/achievement_securityalert/76
|
|
- http://securityreason.com/achievement_securityalert/77
|
|
- http://securityreason.com/achievement_securityalert/78
|
|
- http://securityreason.com/achievement_securityalert/81
|
|
- https://bugzilla.mozilla.org/show_bug.cgi?id=516396
|
|
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9541
|
|
|
|
#### Github
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/CVEDB/PoC-List
|
|
- https://github.com/CVEDB/awesome-cve-repo
|
|
- https://github.com/Fullmetal5/str2hax
|
|
- https://github.com/rocketprogrammer/awesome-stars
|
|
|