Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby rb_ary_store 函数多个整数溢出漏洞
Vulnerability Description
Ruby是一种功能强大的面向对象的脚本语言。 Ruby 1.8.4 以及之前版本,1.8.5-p231 之前的1.8.5, 1.8.6-p230之前的 1.8.6,1.8.7-p22 之前的 1.8.7版本,其 rb_ary_store 函数存在多个整数溢出漏洞,允许攻击者通过上下文关联造成拒绝服务攻击或执行任意代码。注意:作为 20080624,出现了多个与 Ruby 相关的 CVE 标识符不一致的情况。CVE描述应被视为权威,虽然它可能会发生变化。
CVSS Information
N/A
Vulnerability Type
N/A