V
Scaner-VS
HomeCatalogSourcesCWECAPECATT&CKMitigationsDocs
CVE-2008-1391
DEB
HighConfirmedExploit available

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-depe…

CVSS
7.5
High
EPSS
0.19
p95
Published
2008-01-01
Updated
2008-01-01
Description

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.

Tags · CWE
CWE-189
Affected products
FreebsdNetbsd
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Timeline
2008-01-01
Published
2008-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Authentication
Au: N
None (N)
Confidentiality Impact
C: P
Partial
Integrity Impact
I: P
Partial
Availability Impact
A: P
Partial
Exploit indicators
EPSS
0.191 · p95
Known exploited (KEV)
No
Known exploits — Сканер-ВС
15274
exploitdb · https://www.exploit-db.com/exploits/15274
Enterprise
15304
exploitdb · https://www.exploit-db.com/exploits/15304
Enterprise
17120
exploitdb · https://www.exploit-db.com/exploits/17120
Enterprise
18105
exploitdb · https://www.exploit-db.com/exploits/18105
Enterprise
31550
exploitdb · https://www.exploit-db.com/exploits/31550
Enterprise
33230
exploitdb · https://www.exploit-db.com/exploits/33230
Enterprise
36404
exploitdb · https://www.exploit-db.com/exploits/36404
Enterprise
44024
exploitdb · https://www.exploit-db.com/exploits/44024
Enterprise
44025
exploitdb · https://www.exploit-db.com/exploits/44025
Enterprise
CVE-2010-3847
github-poc · https://github.com/magisterquis/cve-2010-3847
Enterprise
Affected software
ProductVendorStatus
eglibcTracked
glibcTracked
glibcTracked
glibcTracked
kfreebsd-6Tracked
kfreebsd-7Tracked
freebsd*Tracked
netbsd*Tracked