OSVDB ID: 84710

Title: GNU C Library (glibc) Multiple Function Input String Parsing Multiple Remote Overflow

Info

Disclosure

Aug 12, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

GNU C Library (glibc) is prone to an overflow condition. This issue is triggered by integer overflows in the strtod(), strtof(), strtold(), and strtod_l() functions when parsing input strings, which will result in a buffer overflow. With a specially crafted overly long string, a remote attacker can potentially execute arbitrary code.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Free Software Foundation

GNU C Library (glibc)

2.16

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/84710