CVE-2009-4124 in Ruby
Summary
Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
11/30/2009
Disclosure
12/11/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 51118 | Ruby string.c rb_str_justify memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2009-4124 |