CVE

Id
41447  
CVE No.
CVE-2009-4012  
Status
Candidate  
Description
Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20091119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455166 41447 CVE-2009-4012 CONFIRM:http://linux.thai.net/node/184  View
455167 41447 CVE-2009-4012 CONFIRM:http://linux.thai.net/svn/software/libthai/tags/r_0_1_13/ChangeLog  View
455168 41447 CVE-2009-4012 CONFIRM:http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.6-1+etch1.diff.gz  View
455169 41447 CVE-2009-4012 CONFIRM:http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.9-4+lenny1.diff.gz  View
455170 41447 CVE-2009-4012 DEBIAN:DSA-1971  View
455171 41447 CVE-2009-4012 URL:http://www.debian.org/security/2010/dsa-1971  View
455172 41447 CVE-2009-4012 SUSE:SUSE-SR:2010:002  View
455173 41447 CVE-2009-4012 URL:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html  View
455174 41447 CVE-2009-4012 UBUNTU:USN-887-1  View
455175 41447 CVE-2009-4012 URL:http://ubuntu.com/usn/usn-887-1  View
455176 41447 CVE-2009-4012 BID:37822  View
455177 41447 CVE-2009-4012 URL:http://www.securityfocus.com/bid/37822  View
455178 41447 CVE-2009-4012 SECUNIA:38196  View
455179 41447 CVE-2009-4012 URL:http://secunia.com/advisories/38196  View
455180 41447 CVE-2009-4012 SECUNIA:38213  View
455181 41447 CVE-2009-4012 URL:http://secunia.com/advisories/38213  View
455182 41447 CVE-2009-4012 SECUNIA:38420  View
455183 41447 CVE-2009-4012 URL:http://secunia.com/advisories/38420  View
455184 41447 CVE-2009-4012 SECUNIA:38235  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38534 JVNDB-2010-004319 RCD-hybrid などの clean_string 関数におけるサービス運用妨害 (DoS) の脆弱性 (1) IRCD-hybrid、(2) ircd-ratbox および (3) oftc-hybrid の clean_string 関数は、flatten_links が無効になっている際、整数アンダーフローが発生するため、任意のコードを実行される、またはサービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2009-4016 41447 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004319.html  View