- Description
- Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
- Source
- cve@mitre.org
- NVD status
- Analyzed
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
- nvd@nist.gov
- CWE-189
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:csilvers:gperftools:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEC9A6EA-129D-4A9E-A3F6-379FC64E4B22",
"versionEndIncluding": "0.3"
},
{
"criteria": "cpe:2.3:a:csilvers:gperftools:0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BDB58C4-45E6-401B-9305-B422E7760FB3"
},
{
"criteria": "cpe:2.3:a:csilvers:gperftools:0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0D76DB5-A8CA-4667-8B62-F38132D7A5C8"
}
],
"operator": "OR"
}
]
}
]