Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Glibc | Gnu | 2.14 | 2.14 |