Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libthai | Linux.thai | * | 0.1.12 (including) |
| Libthai | Linux.thai | 0.1.0 (including) | 0.1.0 (including) |
| Libthai | Linux.thai | 0.1.1 (including) | 0.1.1 (including) |
| Libthai | Linux.thai | 0.1.2 (including) | 0.1.2 (including) |
| Libthai | Linux.thai | 0.1.3 (including) | 0.1.3 (including) |
| Libthai | Linux.thai | 0.1.4 (including) | 0.1.4 (including) |
| Libthai | Linux.thai | 0.1.5 (including) | 0.1.5 (including) |
| Libthai | Linux.thai | 0.1.6 (including) | 0.1.6 (including) |
| Libthai | Linux.thai | 0.1.7 (including) | 0.1.7 (including) |
| Libthai | Linux.thai | 0.1.8 (including) | 0.1.8 (including) |
| Libthai | Linux.thai | 0.1.9 (including) | 0.1.9 (including) |
| Libthai | Linux.thai | 0.1.10 (including) | 0.1.10 (including) |
| Libthai | Linux.thai | 0.1.11 (including) | 0.1.11 (including) |