CVE

Id
31802  
CVE No.
CVE-2008-1685  
Status
Candidate  
Description
** DISPUTED ** gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer overflow attacks, and provide no diagnostic message about this removal. NOTE: the vendor has determined that this compiler behavior is correct according to section 6.5.6 of the C99 standard (aka ISO/IEC 9899:1999).  
Phase
Assigned (20080406)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
342280 31802 CVE-2008-1685 MISC:http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763  View
342281 31802 CVE-2008-1685 CERT-VN:VU#162289  View
342282 31802 CVE-2008-1685 URL:http://www.kb.cert.org/vuls/id/162289  View
342283 31802 CVE-2008-1685 XF:gcc-weak-security(41686)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50346 JVNDB-2008-005656 SLMail Pro の WebContainer.exe におけるサービス運用妨害 (DoS) の脆弱性 SLMail Pro の WebContainer.exe は、スタック消費により、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2008-1689 31802 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005656.html  View