Buffer overflow in Stlport Project

CVE-2006-0963

Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.

Affected products

Stlport_project Stlport — versions 5.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Not Applicable)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, x_refsource_SECUNIA, Not Applicable, Vendor Advisory, third-party-advisory)
cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN)