Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified related functions in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Glibc | Gnu | 2.16 (including) | 2.16 (including) |
| Red Hat Enterprise Linux 5 | RedHat | glibc-0:2.5-81.el5_8.7 | * |
| Red Hat Enterprise Linux 6 | RedHat | glibc-0:2.12-1.80.el6_3.5 | * |
| RHEV 3.X Hypervisor and Agents for RHEL-6 | RedHat | rhev-hypervisor6-0:6.3-20120926.0.el6_3 | * |
| Eglibc | Ubuntu | devel | * |
| Eglibc | Ubuntu | lucid | * |
| Eglibc | Ubuntu | natty | * |
| Eglibc | Ubuntu | oneiric | * |
| Eglibc | Ubuntu | precise | * |
| Glibc | Ubuntu | hardy | * |