Cloudanix VulnDB

CVE-2009-0689

None

CVSS

—

EPSS

28.1%

Published

Jul 1, 2009

CISA due date

—

The record

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Affected packages

Ecosystem Package Introduced Fixed
Debian:10 kde4libs 0 4:4.3.4-1
Debian:11 mono 0 4.2.1.102+dfsg2-4
Debian:11 nspr 0 4.8-2
Debian:12 mono 0 4.2.1.102+dfsg2-4
Debian:12 nspr 0 4.8-2
Debian:13 mono 0 4.2.1.102+dfsg2-4
Debian:13 nspr 0 4.8-2
Debian:5.0 kdelibs 0 4:3.5.10.dfsg.1-0lenny4
Debian:5.0 nspr 0 4.7.1-5
Debian:6.0 mono 0 2.6.7-5.1+deb6u2
Debian:8 mono 0 3.2.8+dfsg-10+deb8u1
Mageia:5 mono 0 3.12.1-1.2.mga5
Red Hat:enterprise_linux:3::as seamonkey 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-chat 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-debuginfo 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-dom-inspector 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-js-debugger 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-mail 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-nspr 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-nspr-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-nss 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::as seamonkey-nss-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-chat 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-debuginfo 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-dom-inspector 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-js-debugger 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-mail 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nspr 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nspr-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nss 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::desktop seamonkey-nss-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-chat 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-debuginfo 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-dom-inspector 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-js-debugger 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-mail 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-nspr 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-nspr-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-nss 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::es seamonkey-nss-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-chat 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-debuginfo 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-dom-inspector 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-js-debugger 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-mail 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-nspr 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-nspr-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-nss 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:3::ws seamonkey-nss-devel 0 0:1.0.9-0.47.el3
Red Hat:enterprise_linux:4::as firefox 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::as firefox-debuginfo 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::as kdelibs 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::as kdelibs-debuginfo 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::as kdelibs-devel 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::as nspr 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::as nspr-debuginfo 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::as nspr-devel 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::as seamonkey 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as seamonkey-chat 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as seamonkey-debuginfo 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as seamonkey-devel 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as seamonkey-dom-inspector 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as seamonkey-js-debugger 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as seamonkey-mail 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::as thunderbird 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::as thunderbird-debuginfo 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::desktop firefox 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::desktop firefox-debuginfo 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::desktop kdelibs 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::desktop kdelibs-debuginfo 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::desktop kdelibs-devel 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::desktop nspr 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::desktop nspr-debuginfo 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::desktop nspr-devel 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey-chat 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey-debuginfo 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey-devel 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey-dom-inspector 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey-js-debugger 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop seamonkey-mail 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::desktop thunderbird 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::desktop thunderbird-debuginfo 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::es firefox 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::es firefox-debuginfo 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::es kdelibs 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::es kdelibs-debuginfo 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::es kdelibs-devel 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::es nspr 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::es nspr-debuginfo 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::es nspr-devel 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::es seamonkey 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es seamonkey-chat 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es seamonkey-debuginfo 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es seamonkey-devel 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es seamonkey-dom-inspector 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es seamonkey-js-debugger 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es seamonkey-mail 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::es thunderbird 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::es thunderbird-debuginfo 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::ws firefox 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::ws firefox-debuginfo 0 0:3.0.15-3.el4
Red Hat:enterprise_linux:4::ws kdelibs 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::ws kdelibs-debuginfo 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::ws kdelibs-devel 0 6:3.3.1-17.el4_8.1
Red Hat:enterprise_linux:4::ws nspr 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::ws nspr-debuginfo 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::ws nspr-devel 0 0:4.7.6-1.el4_8
Red Hat:enterprise_linux:4::ws seamonkey 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws seamonkey-chat 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws seamonkey-debuginfo 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws seamonkey-devel 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws seamonkey-dom-inspector 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws seamonkey-js-debugger 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws seamonkey-mail 0 0:1.0.9-50.el4_8
Red Hat:enterprise_linux:4::ws thunderbird 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:4::ws thunderbird-debuginfo 0 0:1.5.0.12-25.el4
Red Hat:enterprise_linux:5::client firefox 0 0:3.0.15-3.el5_4
Red Hat:enterprise_linux:5::client firefox-debuginfo 0 0:3.0.15-3.el5_4
Red Hat:enterprise_linux:5::client kdelibs 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client kdelibs-apidocs 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client kdelibs-debuginfo 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client kdelibs-devel 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client nspr 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::client nspr-debuginfo 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::client nspr-devel 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::client thunderbird 0 0:2.0.0.24-2.el5_4
Red Hat:enterprise_linux:5::client thunderbird-debuginfo 0 0:2.0.0.24-2.el5_4
Red Hat:enterprise_linux:5::client xulrunner 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client xulrunner-debuginfo 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client xulrunner-devel 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client xulrunner-devel-unstable 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client_workstation kdelibs 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client_workstation kdelibs-apidocs 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client_workstation kdelibs-debuginfo 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client_workstation kdelibs-devel 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::client_workstation nspr 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::client_workstation nspr-debuginfo 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::client_workstation nspr-devel 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::client_workstation php 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-bcmath 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-cli 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-common 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-dba 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-debuginfo 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-devel 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-gd 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-imap 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-ldap 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-mbstring 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-mysql 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-ncurses 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-odbc 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-pdo 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-pgsql 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-snmp 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-soap 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-xml 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation php-xmlrpc 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::client_workstation xulrunner 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client_workstation xulrunner-debuginfo 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client_workstation xulrunner-devel 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::client_workstation xulrunner-devel-unstable 0 0:1.9.0.15-3.el5_4
Red Hat:enterprise_linux:5::server firefox 0 0:3.0.15-3.el5_4
Red Hat:enterprise_linux:5::server firefox-debuginfo 0 0:3.0.15-3.el5_4
Red Hat:enterprise_linux:5::server kdelibs 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::server kdelibs-apidocs 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::server kdelibs-debuginfo 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::server kdelibs-devel 0 6:3.5.4-25.el5_4.1
Red Hat:enterprise_linux:5::server nspr 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::server nspr-debuginfo 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::server nspr-devel 0 0:4.7.6-1.el5_4
Red Hat:enterprise_linux:5::server php 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-bcmath 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-cli 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-common 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-dba 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-debuginfo 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-devel 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-gd 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-imap 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-ldap 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-mbstring 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-mysql 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-ncurses 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-odbc 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-pdo 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-pgsql 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-snmp 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-soap 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-xml 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server php-xmlrpc 0 0:5.1.6-44.el5_10
Red Hat:enterprise_linux:5::server xulrunner 0 0:1.9.0.15-3.el5_4

Related vulnerabilities