Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Upgrade macOS to the latest versionApply OS X security update 2010-002 | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade php-ncursesUpgrade php-soapUpgrade php-ldapUpgrade php-develUpgrade php-xmlrpcUpgrade kdelibs-develUpgrade php-bcmathUpgrade kdelibsUpgrade php-pdoUpgrade php-dbaUpgrade php-imapUpgrade php-gdUpgrade phpUpgrade kdelibs-apidocsUpgrade php-mbstringUpgrade php-odbcUpgrade php-mysqlUpgrade php-xmlUpgrade php-commonUpgrade php-snmpUpgrade php-pgsqlUpgrade php-cliUpgrade thunderbird | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade monoUpgrade nspr | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade thunderbirdUpgrade operaUpgrade linux-thunderbirdUpgrade linux-operaUpgrade monoUpgrade linux-seamonkeyUpgrade seamonkey | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.0.15Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade kdelibsUpgrade php-mysqlUpgrade php-mbstringUpgrade php-imapUpgrade php-snmpUpgrade kdelibs-apidocsUpgrade php-xmlUpgrade php-commonUpgrade php-cliUpgrade php-odbcUpgrade php-develUpgrade php-ldapUpgrade php-pdoUpgrade php-ncursesUpgrade php-gdUpgrade phpUpgrade php-bcmathUpgrade kdelibs-develUpgrade php-dbaUpgrade php-xmlrpcUpgrade php-pgsqlUpgrade php-soap | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade libkde4-32bitUpgrade utempter-x86Upgrade kdelibs3-32bitUpgrade kdelibs3-docUpgrade ruby-doc-riUpgrade libkde4-x86Upgrade libkdecore4Upgrade mono-data-oracleUpgrade mono-nunitUpgrade libkdecore4-32bitUpgrade ruby-tkUpgrade mono-winformsUpgrade libkde4-develUpgrade mono-extrasUpgrade mono-wcfUpgrade kdelibs3-x86Upgrade ruby-test-suiteUpgrade mono-data-postgresqlUpgrade mono-webUpgrade libkde4Upgrade bytefx-data-mysqlUpgrade kdelibs4-docUpgrade kdelibs3-develUpgrade mono-dataUpgrade kdelibs3-arts-32bitUpgrade ruby-develUpgrade mono-locale-extrasUpgrade kdelibs4Upgrade monodoc-coreUpgrade mono-coreUpgrade libkdecore4-x86Upgrade ruby-examplesUpgrade utempter-32bitUpgrade ruby-doc-htmlUpgrade kdelibs3Upgrade mono-data-sqliteUpgrade kdelibs4-coreUpgrade ibm-data-db2Upgrade libkdecore4-develUpgrade mono-data-sybaseUpgrade utempterUpgrade kdelibs3-artsUpgrade kdelibs3-default-styleUpgrade rubyUpgrade mono-develUpgrade kdelibs3-arts-x86Upgrade kdelibs3-default-style-x86Upgrade mono-data-firebirdUpgrade kdelibs3-default-style-32bitUpgrade mono-winfxcoreUpgrade mono-jscript | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kdelibs4c2aUpgrade thunderbird | Nov 8, 2024 | Jul 1, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub