CVE-2008-1391: Integer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-1391 to the following vulnerability:
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GETNUMBER macro; and (2) the printf function, related to leftprec and rightprec.
References: ----------- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1391 https://bugzilla.novell.com/showbug.cgi?id=375315 http://www.securityfocus.com/bid/36443/references http://securityreason.com/achievementsecurityalert/67
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1391?
CVE-2008-1391 has been classified as a high severity vulnerability due to the potential for integer overflows leading to various security risks.
How do I fix CVE-2008-1391?
To address CVE-2008-1391, update to the latest patched versions of FreeBSD or NetBSD that resolve the integer overflow issue.
Which software is affected by CVE-2008-1391?
CVE-2008-1391 affects multiple versions of FreeBSD 6.x, 7.x, and NetBSD 4.x.
What type of vulnerability is CVE-2008-1391?
CVE-2008-1391 is classified as an integer overflow vulnerability which can lead to memory corruption.
Can CVE-2008-1391 be exploited remotely?
Yes, CVE-2008-1391 allows remote attackers to exploit vulnerable systems, potentially executing arbitrary code.