The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Apply OS X security update 2010-002Upgrade macOS to the latest version | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade php-pgsqlUpgrade php-xmlUpgrade php-snmpUpgrade php-odbcUpgrade php-mysqlUpgrade php-commonUpgrade php-cliUpgrade kdelibs-apidocsUpgrade php-mbstringUpgrade php-imapUpgrade php-ncursesUpgrade php-bcmathUpgrade php-xmlrpcUpgrade kdelibs-develUpgrade php-ldapUpgrade kdelibsUpgrade phpUpgrade php-pdoUpgrade php-develUpgrade php-gdUpgrade php-soapUpgrade php-dbaUpgrade thunderbird | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade monoUpgrade nspr | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade linux-operaUpgrade thunderbirdUpgrade operaUpgrade mono | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.0.15Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade php-ldapUpgrade php-xmlrpcUpgrade kdelibs-develUpgrade php-soapUpgrade phpUpgrade php-gdUpgrade php-dbaUpgrade php-ncursesUpgrade php-pdoUpgrade php-pgsqlUpgrade php-develUpgrade php-bcmathUpgrade php-cliUpgrade php-commonUpgrade php-xmlUpgrade kdelibsUpgrade php-imapUpgrade php-odbcUpgrade kdelibs-apidocsUpgrade php-snmpUpgrade php-mysqlUpgrade php-mbstring | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade kdelibs3-arts-32bitUpgrade libkdecore4Upgrade libkde4-x86Upgrade mono-winformsUpgrade libkde4-develUpgrade utempter-x86Upgrade kdelibs3-docUpgrade ruby-test-suiteUpgrade libkdecore4-32bitUpgrade mono-dataUpgrade mono-wcfUpgrade libkde4-32bitUpgrade mono-data-postgresqlUpgrade kdelibs3-develUpgrade libkde4Upgrade mono-extrasUpgrade mono-nunitUpgrade mono-locale-extrasUpgrade kdelibs3-x86Upgrade kdelibs4-docUpgrade mono-webUpgrade bytefx-data-mysqlUpgrade ruby-develUpgrade kdelibs3-32bitUpgrade ruby-tkUpgrade mono-data-oracleUpgrade ruby-doc-riUpgrade monodoc-coreUpgrade libkdecore4-develUpgrade ruby-examplesUpgrade utempter-32bitUpgrade kdelibs4-coreUpgrade kdelibs3-artsUpgrade mono-develUpgrade kdelibs3-default-style-x86Upgrade kdelibs3-default-style-32bitUpgrade mono-data-sybaseUpgrade mono-data-sqliteUpgrade utempterUpgrade kdelibs3-default-styleUpgrade ibm-data-db2Upgrade libkdecore4-x86Upgrade mono-winfxcoreUpgrade rubyUpgrade mono-data-firebirdUpgrade kdelibs4Upgrade mono-coreUpgrade ruby-doc-htmlUpgrade mono-jscriptUpgrade kdelibs3Upgrade kdelibs3-arts-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kdelibs4c2aUpgrade thunderbird | Nov 8, 2024 | Jul 1, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub