Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Apply OS X security update 2010-002Upgrade macOS to the latest version | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade php-ldapUpgrade kdelibs-develUpgrade thunderbirdUpgrade php-ncursesUpgrade phpUpgrade php-imapUpgrade php-gdUpgrade php-soapUpgrade php-xmlrpcUpgrade php-bcmathUpgrade php-develUpgrade php-dbaUpgrade php-pdoUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-odbcUpgrade php-cliUpgrade php-mbstringUpgrade php-snmpUpgrade kdelibs-apidocsUpgrade php-commonUpgrade php-xmlUpgrade kdelibs | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade nsprUpgrade mono | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade operaUpgrade monoUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-operaUpgrade seamonkey | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-dbaUpgrade php-bcmathUpgrade php-develUpgrade php-pdoUpgrade kdelibs-develUpgrade php-xmlrpcUpgrade php-ncursesUpgrade php-gdUpgrade php-ldapUpgrade phpUpgrade php-soapUpgrade php-imapUpgrade php-commonUpgrade php-xmlUpgrade php-mbstringUpgrade php-snmpUpgrade kdelibsUpgrade php-odbcUpgrade php-cliUpgrade php-mysqlUpgrade kdelibs-apidocs | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade ruby-doc-riUpgrade ruby-develUpgrade mozilla-nspr-64bitUpgrade libkde4-x86Upgrade mozillafirefox-branding-upstreamUpgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner191-translations-32bitUpgrade kdelibs3-32bitUpgrade mozilla-xulrunner191-gnomevfs-32bitUpgrade kdelibs3-develUpgrade mozilla-mailUpgrade python-xpcom190Upgrade MozillaThunderbird-develUpgrade ruby-tkUpgrade libkde4-32bitUpgrade ruby-test-suiteUpgrade operaUpgrade sle-sdk-releaseUpgrade seamonkey-mailUpgrade utempter-x86Upgrade python-xpcom191Upgrade mozilla-xulrunner190-translations-64bitUpgrade kdelibs3-default-style-64bitUpgrade libkdecore4Upgrade kdelibs3-arts-32bitUpgrade libkde4-develUpgrade libkdecore4-32bitUpgrade kdelibs3-arts-64bitUpgrade mozillaUpgrade seamonkey-spellcheckerUpgrade libkde4Upgrade kdelibs3-devel-docUpgrade mozilla-xulrunner191-translationsUpgrade kdelibs3-docUpgrade kdelibs4-docUpgrade mozillafirefoxUpgrade kdelibs3-x86Upgrade mozilla-xulrunner190-translations-32bitUpgrade seamonkey-venkmanUpgrade mozilla-xulrunner191-32bitUpgrade kdelibs3-64bitUpgrade kdelibs3-arts-x86Upgrade kdelibs3-default-styleUpgrade utempter-64bitUpgrade ruby-doc-htmlUpgrade mozilla-xulrunner190-32bitUpgrade ruby-examplesUpgrade mozilla-dom-inspectorUpgrade utempter-32bitUpgrade libkdecore4-develUpgrade seamonkey-ircUpgrade kdelibs3-default-style-32bitUpgrade mozilla-develUpgrade libkdecore4-x86Upgrade MozillaFirefox-translationsUpgrade kdelibs4-branding-upstreamUpgrade mozilla-xulrunner190-64bitUpgrade seamonkeyUpgrade rubyUpgrade mozilla-xulrunner190Upgrade kdelibs4Upgrade MozillaThunderbird-translationsUpgrade kdelibs3-artsUpgrade kdelibs4-coreUpgrade mozilla-xulrunner191-gnomevfsUpgrade mozillathunderbirdUpgrade mozilla-nspr-32bitUpgrade kdelibs3Upgrade mozilla-xulrunner190-gnomevfs-64bitUpgrade mozilla-venkmanUpgrade libkde4-64bitUpgrade mozilla-nspr-x86Upgrade mozilla-xulrunner190-develUpgrade seamonkey-dom-inspectorUpgrade mozilla-nspr-develUpgrade mozilla-xulrunner191-develUpgrade libkdecore4-64bitUpgrade mozilla-nsprUpgrade utempterUpgrade mozilla-ircUpgrade mozilla-xulrunner190-translationsUpgrade mozilla-xulrunner190-gnomevfs-32bitUpgrade mozilla-xulrunner191 | Feb 17, 2015 | Jul 1, 2009 |
| Ubuntu | — | Upgrade kdelibs4c2aUpgrade thunderbird | Nov 8, 2024 | Jul 1, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub