Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby rb_str_forma 函数多个整数溢出漏洞
Vulnerability Description
Ruby是一种功能强大的面向对象的脚本语言。 Ruby 1.8.4 以及之前版本，1.8.5-p231 之前的1.8.5, 1.8.6-p230之前的 1.8.6，1.8.7-p22 之前的 1.8.7版本，1.9.0-2 之前的 1.9.0版本，其 rb_str_forma 函数存在多个整数溢出漏洞，允许攻击者通过上下文关联造成拒绝服务攻击或执行任意代码。注意：作为 20080624，出现了多个与 Ruby 相关的 CVE 标识符不一致的情况。CVE描述应被视为权威，虽然它可能会发生变化。
CVSS Information
N/A
Vulnerability Type
N/A