CVE-2009-1904 PoC — Ruby-Lang BigDecimal库拒绝服务漏洞

Source

https://github.com/NZKoz/bigdecimal-segfault-fix

Associated Vulnerability

Title:Ruby-Lang BigDecimal库拒绝服务漏洞 (CVE-2009-1904)
Description:Ruby是一种功能强大的面向对象的脚本语言。 Ruby所使用的BigDecimal标准函数库中存在拒绝服务漏洞，在将BigDecimal对象转换为浮点数时可能会触发分段错误，导致链接到该库的应用崩溃。

Description

Provides a quick workaround for the segfault bug in Ruby (CVE-2009-1904)

File Snapshot


 [4.0K]  /data/pocs/b08849870f4e160ffc6e699db8b5618d813cb4c4
├── [ 600]  bigdecimal-segfault-fix.gemspec
├── [ 200]  example.rb
├── [4.0K]  lib
│   └── [1.2K]  bigdecimal-segfault-fix.rb
├── [ 760]  LICENSE
└── [1.5K]  README.textile

1 directory, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!