CVE-2009-4880: Integer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4880 to the following vulnerability:
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the moneyformat function in PHP, a related issue to CVE-2008-1391.
References: [1] http://securityreason.com/achievementsecurityalert/67 [2] https://bugzilla.redhat.com/showbug.cgi?id=524671 [3] http://sources.redhat.com/bugzilla/showbug.cgi?id=10600 [4] http://sourceware.org/git/?p=glibc.git;a=commit;h=199eb0de8d673fb23aa127721054b4f1803d61f3 [5] http://www.ubuntu.com/usn/USN-944-1 [6] http://www.securityfocus.com/bid/36443 [7] http://secunia.com/advisories/39900 [8] http://www.vupen.com/english/advisories/2010/1246
Public PoC (from [3]):
[cx@localhost ~]$ php -r 'moneyformat("%.1073741821i",1);' Segmentation fault
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4880?
CVE-2009-4880 has a high severity rating due to integer overflows that could lead to exploitation.
How do I fix CVE-2009-4880?
To fix CVE-2009-4880, upgrade to glibc version 2.10.2 or later.
What systems are affected by CVE-2009-4880?
CVE-2009-4880 affects GNU C Library (glibc) versions 2.10.1 and earlier.
What vulnerabilities does CVE-2009-4880 exploit?
CVE-2009-4880 exploits multiple integer overflows in the strfmon implementation.
Can CVE-2009-4880 lead to unauthorized code execution?
Yes, CVE-2009-4880 can potentially allow attackers to execute arbitrary code.