Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in...
nvd · CVSS 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:PModerate · next 30 days
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
An implementation of CVE-2009-0689 for the Nintendo Wii.
Maksymilian Arciemowicz & sp3x · linux · Nov 19, 2009
Maksymilian Arciemowicz & sp3x · bsd · Nov 19, 2009
Maksymilian Arciemowicz & sp3x · bsd · Nov 19, 2009
Maksymilian Arciemowicz & sp3x · bsd · Nov 19, 2009
Maksymilian Arciemowicz & sp3x · windows · Dec 11, 2009
Maksymilian Arciemowicz · multiple · May 26, 2009
Alin Rad Pop · linux · Oct 27, 2009
Maksymilian Arciemowicz · multiple · Nov 20, 2009
Maksymilian Arciemowicz · linux · Nov 20, 2009
Maksymilian Arciemowicz · osx · Jan 8, 2010
Maksymilian Arciemowicz · linux · Jan 8, 2010
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.