CVE - CVE-2012-3480

CVE-ID
CVE-2012-3480	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1027374 URL:http://www.securitytracker.com/id?1027374 MISC:50201 URL:http://secunia.com/advisories/50201 MISC:50422 URL:http://secunia.com/advisories/50422 MISC:54982 URL:http://www.securityfocus.com/bid/54982 MISC:84710 URL:~~http://osvdb.org/84710~~ (Obsolete source) MISC:FEDORA-2012-11927 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085190.html MISC:GLSA-201503-04 URL:https://security.gentoo.org/glsa/201503-04 MISC:RHSA-2012:1207 URL:http://rhn.redhat.com/errata/RHSA-2012-1207.html MISC:RHSA-2012:1208 URL:http://rhn.redhat.com/errata/RHSA-2012-1208.html MISC:RHSA-2012:1262 URL:http://rhn.redhat.com/errata/RHSA-2012-1262.html MISC:RHSA-2012:1325 URL:http://rhn.redhat.com/errata/RHSA-2012-1325.html MISC:USN-1589-1 URL:http://www.ubuntu.com/usn/USN-1589-1 MISC:[libc-alpha] 20120812 Fix strtod integer/buffer overflow (bug 14459) URL:http://sourceware.org/ml/libc-alpha/2012-08/msg00202.html MISC:[oss-security] 20120813 CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines URL:http://www.openwall.com/lists/oss-security/2012/08/13/4 MISC:[oss-security] 20120813 Re: CVE Request -- glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines URL:http://www.openwall.com/lists/oss-security/2012/08/13/6 MISC:http://sourceware.org/bugzilla/show_bug.cgi?id=14459 URL:http://sourceware.org/bugzilla/show_bug.cgi?id=14459
Assigning CNA
Red Hat, Inc.
Date Record Created
20120614	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120614)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.