CVE-2009-4012
Published Jan 19, 2010
Last updated 15 years ago
Overview
- Description
- Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-189
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:linux.thai:libthai:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "175C41F0-0AE1-4988-B578-7F2FA5D8D226",
"versionEndIncluding": "0.1.12"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC09407C-A17B-4352-95C1-4DE5AFDBA50A"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A44B598-6C1C-4F36-8D0B-8490DF19B8F2"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2F713E2-60CF-43B3-BE0A-7E27ACB8CF43"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C589B35-D04B-475D-92C1-43119F7E1D02"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "906F252C-A50B-47E4-AA46-944EA8387C67"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5947FE7-2AFF-4993-A4EA-4C55572313C1"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61AEC947-09BD-4C27-B98B-4BDBB54162EE"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51B63F91-BDE7-4210-8461-2A64C128E723"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9BE9DC1-EE8D-42CF-92CE-D587527EE31F"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "011702A6-9E15-48A4-8403-85FBE5DC5F77"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8075A59-71F3-4B62-A12C-E0B7EFA36B76"
},
{
"criteria": "cpe:2.3:a:linux.thai:libthai:0.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "230F57D9-B54A-43E3-BFBD-6FA4A38E9F74"
}
],
"operator": "OR"
}
]
}
]