Back to feed
EUVD-2008-1398 · Published Mar 27, 2008
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
Technologies
Netbsd NetbsdFreebsd Freebsd
Weaknesses
CWE-189
CVSS scores
- v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://securityreason.com/achievement_securityalert/53
- http://securityreason.com/securityalert/3770
- http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/strfmon.c
- http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
- http://secunia.com/advisories/29574
- http://secunia.com/advisories/33179
Potentially impacted assets
See if this affects your attack surface
