NVD

Id
12366  
Name
CVE-2010-0830  
Description
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-01  
Modified Date
2016-12-06  
Seq
2010-0830  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
68054 12366 CVE-2010-0830 http://drosenbe.blogspot.com/2010/05/integer-overflow-in-ldso-cve-2010-0830.html  View
68055 12366 CVE-2010-0830 http://frugalware.org/security/662  View
68056 12366 CVE-2010-0830 GLSA-201011-01  View
68057 12366 CVE-2010-0830 1024044  View
68058 12366 CVE-2010-0830 http://sourceware.org/git/?p=glibc.git;a=commit;h=db07e962b6ea963dbb345439f6ab9b0cf74d87c5  View
68059 12366 CVE-2010-0830 DSA-2058  View
68060 12366 CVE-2010-0830 MDVSA-2010:111  View
68061 12366 CVE-2010-0830 MDVSA-2010:112  View
68062 12366 CVE-2010-0830 40063  View
68063 12366 CVE-2010-0830 USN-944-1  View
68064 12366 CVE-2010-0830 ADV-2010-1246  View
68065 12366 CVE-2010-0830 glibc-elf-code-execution(58915)  View
68066 12366 CVE-2010-0830 SUSE-SA:2010:052  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38098 JVNDB-2010-003883 GNU C Library の elf_get_dynamic_info 関数における整数符号化エラー脆弱性 GNU C Library の ld.so の elf/dynamic-link.h の elf_get_dynamic_info 関数には、--verify オプションが使用されている際、整数符号化エラー脆弱性が存在します。 CVE-2010-0830 43410 CVE-2010-0830 12366 5.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003883.html 2010-06-01 2012-12-26 View