CVE-2012-0864: Integer Overflow
In the Phrack article "A Eulogy for Format Strings", a researcher using nickname "Captain Planet" reported an integer overflow flaw in the format string protection mechanism offered by FORTIFYSOURCE. A remote attacker could provide a specially crafted executable, leading to FORTIFYSOURCE format string protection mechanism bypass, when executed.
References: http://www.phrack.org/issues.html?issue=67&id=9#article
Upstream bug and Kees Cook's proposed patches: http://sourceware.org/bugzilla/showbug.cgi?id=13656 http://sourceware.org/ml/libc-alpha/2012-02/msg00023.html http://sourceware.org/ml/libc-alpha/2012-02/msg00012.html http://sourceware.org/ml/libc-alpha/2012-02/msg00073.html
Other sources
Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0864?
CVE-2012-0864 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2012-0864?
To fix CVE-2012-0864, upgrade to a patched version of GNU C Library (glibc) above version 2.14.
Who is affected by CVE-2012-0864?
CVE-2012-0864 affects applications using GNU C Library (glibc) version 2.14, particularly those relying on FORTIFY_SOURCE for format string protection.
Can CVE-2012-0864 be exploited remotely?
Yes, CVE-2012-0864 can be exploited remotely if an attacker provides a specially crafted executable.
What are the implications of CVE-2012-0864 for developers?
Developers must ensure proper handling of format strings and apply available fixes to prevent exploitation of CVE-2012-0864.