The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Upgrade macOS to the latest versionApply OS X security update 2010-002 | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade kdelibs-develUpgrade php-imapUpgrade thunderbirdUpgrade phpUpgrade php-ldapUpgrade php-bcmathUpgrade php-soapUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pdoUpgrade php-ncursesUpgrade kdelibsUpgrade php-develUpgrade kdelibs-apidocsUpgrade php-mysqlUpgrade php-xmlUpgrade php-pgsqlUpgrade php-commonUpgrade php-snmpUpgrade php-mbstringUpgrade php-cliUpgrade php-odbcUpgrade php-dba | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade nsprUpgrade mono | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-operaUpgrade thunderbirdUpgrade operaUpgrade linux-seamonkeyUpgrade monoUpgrade seamonkey | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade php-develUpgrade php-pdoUpgrade php-pgsqlUpgrade kdelibs-develUpgrade php-soapUpgrade php-bcmathUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-gdUpgrade phpUpgrade php-ncursesUpgrade php-snmpUpgrade php-mbstringUpgrade php-xmlUpgrade php-cliUpgrade php-mysqlUpgrade kdelibsUpgrade php-imapUpgrade php-commonUpgrade php-odbcUpgrade kdelibs-apidocs | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade mono-data-postgresqlUpgrade libkde4Upgrade kdelibs4-docUpgrade kdelibs3-32bitUpgrade utempter-x86Upgrade kdelibs3-arts-32bitUpgrade kdelibs3-develUpgrade mono-data-oracleUpgrade libkdecore4Upgrade kdelibs3-docUpgrade ruby-doc-riUpgrade mono-dataUpgrade mono-extrasUpgrade libkdecore4-32bitUpgrade mono-nunitUpgrade ruby-tkUpgrade libkde4-develUpgrade mono-locale-extrasUpgrade ruby-develUpgrade ruby-test-suiteUpgrade mono-webUpgrade mono-winformsUpgrade libkde4-32bitUpgrade libkde4-x86Upgrade mono-wcfUpgrade bytefx-data-mysqlUpgrade kdelibs3-x86Upgrade monodoc-coreUpgrade kdelibs4-coreUpgrade libkdecore4-develUpgrade utempter-32bitUpgrade libkdecore4-x86Upgrade mono-develUpgrade kdelibs3Upgrade kdelibs4Upgrade kdelibs3-default-style-x86Upgrade kdelibs3-artsUpgrade mono-coreUpgrade kdelibs3-default-styleUpgrade kdelibs3-arts-x86Upgrade utempterUpgrade mono-data-sybaseUpgrade mono-winfxcoreUpgrade mono-data-sqliteUpgrade rubyUpgrade ruby-doc-htmlUpgrade ibm-data-db2Upgrade mono-data-firebirdUpgrade mono-jscriptUpgrade ruby-examplesUpgrade kdelibs3-default-style-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade kdelibs4c2a | Nov 8, 2024 | Jul 1, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub