CVEvulnerability
CVE-2009-4012
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.
Affected configurations
• linux.thai libthai (<= 0.1.12)
• linux.thai libthai 0.1.0
• linux.thai libthai 0.1.1
• linux.thai libthai 0.1.2
• linux.thai libthai 0.1.3
• linux.thai libthai 0.1.4
• linux.thai libthai 0.1.5
• linux.thai libthai 0.1.6
• linux.thai libthai 0.1.7
• linux.thai libthai 0.1.8
• linux.thai libthai 0.1.9
• linux.thai libthai 0.1.10
• linux.thai libthai 0.1.11
Related
Weakness · not in database (1)
References
- http://linux.thai.net/node/184 linux.thai.net
- http://linux.thai.net/svn/software/libthai/tags/r_0_1_13/ChangeLog linux.thai.net
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/38196 Vendor Advisory
- http://secunia.com/advisories/38213 Vendor Advisory
- http://secunia.com/advisories/38235 secunia.com
- http://secunia.com/advisories/38420 secunia.com
- http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.6-1+etch1.diff.gz Patch
- http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.9-4+lenny1.diff.gz Patch
- http://ubuntu.com/usn/usn-887-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-1971 www.debian.org
- http://www.securityfocus.com/bid/37822 www.securityfocus.com
- http://linux.thai.net/node/184 linux.thai.net
- http://linux.thai.net/svn/software/libthai/tags/r_0_1_13/ChangeLog linux.thai.net
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/38196 Vendor Advisory
- http://secunia.com/advisories/38213 Vendor Advisory
- http://secunia.com/advisories/38235 secunia.com
- http://secunia.com/advisories/38420 secunia.com
- http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.6-1+etch1.diff.gz Patch
- http://security.debian.org/pool/updates/main/libt/libthai/libthai_0.1.9-4+lenny1.diff.gz Patch
- http://ubuntu.com/usn/usn-887-1 ubuntu.com
- http://www.debian.org/security/2010/dsa-1971 www.debian.org
- http://www.securityfocus.com/bid/37822 www.securityfocus.com