Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Upgrade macOS to the latest versionApply OS X security update 2010-002 | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade php-xmlrpcUpgrade php-develUpgrade kdelibs-develUpgrade php-ldapUpgrade phpUpgrade php-soapUpgrade php-bcmathUpgrade php-imapUpgrade php-gdUpgrade kdelibsUpgrade thunderbirdUpgrade php-pdoUpgrade php-dbaUpgrade php-odbcUpgrade php-pgsqlUpgrade php-cliUpgrade kdelibs-apidocsUpgrade php-mbstringUpgrade php-snmpUpgrade php-xmlUpgrade php-mysqlUpgrade php-commonUpgrade php-ncurses | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade nsprUpgrade mono | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade monoUpgrade linux-operaUpgrade operaUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade linux-thunderbird | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade php-pdoUpgrade php-ldapUpgrade php-soapUpgrade php-pgsqlUpgrade php-develUpgrade kdelibs-develUpgrade php-dbaUpgrade php-gdUpgrade php-xmlrpcUpgrade php-ncursesUpgrade phpUpgrade php-bcmathUpgrade php-xmlUpgrade kdelibs-apidocsUpgrade php-snmpUpgrade php-imapUpgrade php-mbstringUpgrade php-odbcUpgrade kdelibsUpgrade php-commonUpgrade php-mysqlUpgrade php-cli | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade rubyUpgrade kdelibs3-arts-x86Upgrade kdelibs3-default-style-x86Upgrade ibm-data-db2Upgrade mono-winfxcoreUpgrade libkdecore4-develUpgrade utempter-32bitUpgrade ruby-examplesUpgrade ruby-doc-htmlUpgrade libkdecore4-x86Upgrade mono-data-sybaseUpgrade monodoc-coreUpgrade kdelibs3-default-styleUpgrade mono-jscriptUpgrade kdelibs4-coreUpgrade mono-coreUpgrade kdelibs4Upgrade kdelibs3-default-style-32bitUpgrade mono-develUpgrade utempterUpgrade kdelibs3Upgrade mono-data-firebirdUpgrade kdelibs3-artsUpgrade mono-data-sqliteUpgrade mono-extrasUpgrade libkde4Upgrade kdelibs4-docUpgrade mono-winformsUpgrade libkdecore4-32bitUpgrade mono-locale-extrasUpgrade mono-dataUpgrade kdelibs3-32bitUpgrade kdelibs3-x86Upgrade mono-data-oracleUpgrade mono-wcfUpgrade kdelibs3-docUpgrade mono-data-postgresqlUpgrade libkde4-develUpgrade libkdecore4Upgrade mono-nunitUpgrade ruby-develUpgrade libkde4-x86Upgrade ruby-doc-riUpgrade ruby-tkUpgrade mono-webUpgrade bytefx-data-mysqlUpgrade ruby-test-suiteUpgrade kdelibs3-develUpgrade utempter-x86Upgrade kdelibs3-arts-32bitUpgrade libkde4-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kdelibs4c2aUpgrade thunderbird | Nov 8, 2024 | Jul 1, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub