Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Upgrade macOS to the latest versionApply OS X security update 2010-002 | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade php-xmlUpgrade kdelibs-apidocsUpgrade php-mysqlUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-cliUpgrade php-snmpUpgrade php-commonUpgrade php-odbcUpgrade kdelibsUpgrade php-imapUpgrade kdelibs-develUpgrade php-ncursesUpgrade php-pdoUpgrade phpUpgrade php-develUpgrade php-dbaUpgrade php-soapUpgrade php-bcmathUpgrade thunderbirdUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-gd | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade monoUpgrade nspr | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade operaUpgrade monoUpgrade linux-opera | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.0.15Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade php-develUpgrade php-ncursesUpgrade phpUpgrade php-dbaUpgrade php-bcmathUpgrade php-xmlrpcUpgrade kdelibs-develUpgrade php-gdUpgrade php-pgsqlUpgrade php-pdoUpgrade php-soapUpgrade php-ldapUpgrade php-commonUpgrade php-mysqlUpgrade php-mbstringUpgrade php-imapUpgrade php-snmpUpgrade php-odbcUpgrade kdelibsUpgrade php-xmlUpgrade php-cliUpgrade kdelibs-apidocs | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade bytefx-data-mysqlUpgrade libkde4Upgrade mono-extrasUpgrade mono-wcfUpgrade libkde4-32bitUpgrade mono-nunitUpgrade libkdecore4-32bitUpgrade mono-winformsUpgrade utempter-x86Upgrade libkde4-develUpgrade libkdecore4Upgrade mono-dataUpgrade ruby-develUpgrade kdelibs3-32bitUpgrade ruby-test-suiteUpgrade libkde4-x86Upgrade ruby-doc-riUpgrade kdelibs3-x86Upgrade kdelibs3-arts-32bitUpgrade kdelibs4-docUpgrade mono-locale-extrasUpgrade mono-data-postgresqlUpgrade kdelibs3-develUpgrade mono-webUpgrade mono-data-oracleUpgrade ruby-tkUpgrade kdelibs3-docUpgrade utempter-32bitUpgrade libkdecore4-develUpgrade monodoc-coreUpgrade mono-jscriptUpgrade kdelibs3-default-style-32bitUpgrade mono-winfxcoreUpgrade ruby-examplesUpgrade mono-data-sqliteUpgrade libkdecore4-x86Upgrade utempterUpgrade kdelibs3-default-styleUpgrade ruby-doc-htmlUpgrade ibm-data-db2Upgrade kdelibs3-default-style-x86Upgrade kdelibs3-arts-x86Upgrade kdelibs3-artsUpgrade kdelibs3Upgrade mono-data-firebirdUpgrade mono-develUpgrade kdelibs4-coreUpgrade rubyUpgrade mono-coreUpgrade kdelibs4Upgrade mono-data-sybase | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kdelibs4c2aUpgrade thunderbird | Nov 8, 2024 | Jul 1, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub