Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenBSD缓冲区溢出漏洞
Vulnerability Description
OpenBSD是加拿大OpenBSD（Openbsd）项目组的一套跨平台的、基于BSD的类UNIX操作系统。 OpenBSD、NetBSD、FreeBSD的dtoa实现中存在缓冲区溢出漏洞。在src/lib/libc/gdtoa/gdtoaimp.h中： - ---gdtoaimp.h--- ... #define Kmax 15 ... - ---gdtoaimp.h--- 最大的Kmax长度为15，如果提供了更大的值(如17)，程序就会溢出freelist数组，bss为0x1。 以NetBSD为例：
CVSS Information
N/A
Vulnerability Type
N/A