CVE-2010-2489: Buffer Overflow
Published Jul 9, 2010
·Updated
Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplacemode value that is not properly handled when constructing the filenames of the backup files.
Affected Software
15 affected components
ruby-lang ruby=1.9.0-0
ruby-lang ruby=1.9.0-1
ruby-lang ruby=1.9.0-2
ruby-lang ruby=1.9.0-20060415
ruby-lang ruby=1.9.0-20070709
ruby-lang ruby=1.9.1--p0
ruby-lang ruby=1.9.1--p129
ruby-lang ruby=1.9.1--p243
ruby-lang ruby=1.9.1--p376
ruby-lang ruby=1.9.1--p429
ruby-lang ruby=1.9.1--preview_1
ruby-lang ruby=1.9.1--preview_2
ruby-lang ruby=1.9.1--rc1
ruby-lang ruby=1.9.1--rc2
Microsoft Windows
Remediation
Event History
Jul 9, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Jul 12, 2010
Data Sourced
01:27 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2489?
The severity of CVE-2010-2489 is considered high due to the potential for local users to gain elevated privileges.
2
How do I fix CVE-2010-2489?
To fix CVE-2010-2489, update Ruby to version 1.9.1-p429 or later.
3
Which versions of Ruby are affected by CVE-2010-2489?
Affected versions of Ruby include all 1.9.x versions prior to 1.9.1-p429.
4
Can CVE-2010-2489 be exploited remotely?
CVE-2010-2489 cannot be exploited remotely; it requires local access to a vulnerable system.
5
What is the nature of the vulnerability in CVE-2010-2489?
CVE-2010-2489 is a buffer overflow vulnerability that occurs due to improper handling of the ARGF.inplace_mode value.