CVE-2012-0864 in GNU C Library

요약 (영어)

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.

예약하다

2012. 01. 19.

공개

2013. 05. 02.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
4996	GNU C Library vfprintf Local Privilege Escalation	189	개념 증명	공식 수정	CVE-2012-0864
4675	GNU C Library Format String Protection Local Privilege Escalation	189	개념 증명	공식 수정	CVE-2012-0864