Vulnerability in Freebsd

CVE-2008-1391

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.

EPSS: 0.188 (97.0th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 6.0, 6.0_p5_release, 7.0
Netbsd — versions 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (Exploit, x_refsource_SREASON, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (Exploit, x_refsource_SREASONRES, third-party-advisory)