CVE-2009-4124 in RubyИнформация

Сводка

по MITRE

Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Резервировать

30.11.2009

Раскрытие

11.12.2009

Модерация

принято

Вход

VDB-51118

EPSS

0.03875

KEV

Нет

Деятельности

Очень низкий

Источники

Do you want to use VulDB in your project?

Use the official API to access entries easily!