CVE Vulnerabilities

CVE-2009-4012

Published: Jan 19, 2010 | Modified: Mar 26, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 MODERATE
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.

Affected Software

Name Vendor Start Version End Version
Libthai Linux.thai * 0.1.12 (including)
Libthai Linux.thai 0.1.0 (including) 0.1.0 (including)
Libthai Linux.thai 0.1.1 (including) 0.1.1 (including)
Libthai Linux.thai 0.1.2 (including) 0.1.2 (including)
Libthai Linux.thai 0.1.3 (including) 0.1.3 (including)
Libthai Linux.thai 0.1.4 (including) 0.1.4 (including)
Libthai Linux.thai 0.1.5 (including) 0.1.5 (including)
Libthai Linux.thai 0.1.6 (including) 0.1.6 (including)
Libthai Linux.thai 0.1.7 (including) 0.1.7 (including)
Libthai Linux.thai 0.1.8 (including) 0.1.8 (including)
Libthai Linux.thai 0.1.9 (including) 0.1.9 (including)
Libthai Linux.thai 0.1.10 (including) 0.1.10 (including)
Libthai Linux.thai 0.1.11 (including) 0.1.11 (including)
Libthai Ubuntu dapper *
Libthai Ubuntu hardy *
Libthai Ubuntu intrepid *
Libthai Ubuntu jaunty *
Libthai Ubuntu karmic *
Libthai Ubuntu upstream *

References