Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2009-4124

Опубликовано: 11 дек. 2009
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 10

Описание

Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.

РелизСтатусПримечание
dapper

not-affected

devel

not-affected

hardy

not-affected

intrepid

not-affected

jaunty

not-affected

karmic

not-affected

lucid

not-affected

maverick

not-affected

natty

not-affected

oneiric

not-affected

Показывать по

РелизСтатусПримечание
dapper

ignored

end of life
devel

DNE

pulled 2010-07-27
hardy

ignored

end of life
intrepid

released

1.9.0.2-7ubuntu1.3
jaunty

released

1.9.0.2-9ubuntu1.2
karmic

released

1.9.0.5-1ubuntu1.2
lucid

released

1.9.0.5-1ubuntu2
maverick

DNE

pulled 2010-07-27
natty

DNE

pulled 2010-07-27
oneiric

DNE

pulled 2010-07-27

Показывать по

РелизСтатусПримечание
dapper

DNE

devel

not-affected

1.9.1.376-1
hardy

DNE

intrepid

DNE

jaunty

DNE

karmic

ignored

end of life
lucid

not-affected

1.9.1.376-1
maverick

not-affected

1.9.1.376-1
natty

not-affected

1.9.1.376-1
oneiric

not-affected

1.9.1.376-1

Показывать по

EPSS

Процентиль: 83%
0.02052
Низкий

10 Critical

CVSS2

Связанные уязвимости

redhat
около 16 лет назад

Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.

nvd
около 16 лет назад

Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.

debian
около 16 лет назад

Heap-based buffer overflow in the rb_str_justify function in string.c ...

github
больше 3 лет назад

Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 83%
0.02052
Низкий

10 Critical

CVSS2

Уязвимость CVE-2009-4124