Title: GNU C Library (glibc) Multiple Function Input String Parsing Multiple Remote Overflow
Info
Disclosure
Aug 12, 2012
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
GNU C Library (glibc) is prone to an overflow condition. This issue is triggered by integer overflows in the strtod(), strtof(), strtold(), and strtod_l() functions when parsing input strings, which will result in a buffer overflow. With a specially crafted overly long string, a remote attacker can potentially execute arbitrary code.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Vendor Verified
Solution
OSVDB is not aware of a solution for this vulnerability.