CVE-2009-4124 in Ruby
Zusammenfassung (Englisch)
Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
30.11.2009
Veröffentlichung
11.12.2009
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 51118 | Ruby string.c rb_str_justify Pufferüberlauf | 119 | Proof-of-Concept | Offizieller Fix | CVE-2009-4124 |