The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Apply OS X security update 2010-002Upgrade macOS to the latest version | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade php-mbstringUpgrade kdelibs-apidocsUpgrade php-cliUpgrade php-snmpUpgrade php-pgsqlUpgrade php-xmlUpgrade php-commonUpgrade php-odbcUpgrade php-mysqlUpgrade php-xmlrpcUpgrade thunderbirdUpgrade php-dbaUpgrade php-pdoUpgrade phpUpgrade php-ldapUpgrade php-bcmathUpgrade php-gdUpgrade php-imapUpgrade php-soapUpgrade kdelibsUpgrade php-ncursesUpgrade php-develUpgrade kdelibs-devel | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade nsprUpgrade mono | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade monoUpgrade linux-thunderbirdUpgrade linux-operaUpgrade linux-seamonkeyUpgrade operaUpgrade thunderbirdUpgrade seamonkey | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.5.4Upgrade to Mozilla Firefox version 3.0.15 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade kdelibsUpgrade php-snmpUpgrade php-commonUpgrade kdelibs-apidocsUpgrade php-xmlUpgrade php-cliUpgrade php-mbstringUpgrade php-odbcUpgrade php-mysqlUpgrade php-imapUpgrade php-gdUpgrade php-dbaUpgrade php-pgsqlUpgrade phpUpgrade php-bcmathUpgrade php-pdoUpgrade php-ncursesUpgrade php-xmlrpcUpgrade php-develUpgrade php-ldapUpgrade php-soapUpgrade kdelibs-devel | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade mono-coreUpgrade rubyUpgrade mono-develUpgrade mono-data-firebirdUpgrade libkdecore4-develUpgrade kdelibs3-artsUpgrade kdelibs3-default-styleUpgrade libkdecore4-x86Upgrade utempter-32bitUpgrade ruby-examplesUpgrade kdelibs3-default-style-32bitUpgrade monodoc-coreUpgrade mono-data-sqliteUpgrade kdelibs4Upgrade mono-jscriptUpgrade mono-data-sybaseUpgrade kdelibs3Upgrade mono-winfxcoreUpgrade utempterUpgrade kdelibs3-arts-x86Upgrade kdelibs3-default-style-x86Upgrade ruby-doc-htmlUpgrade kdelibs4-coreUpgrade ibm-data-db2Upgrade mono-nunitUpgrade mono-locale-extrasUpgrade mono-data-oracleUpgrade ruby-develUpgrade mono-dataUpgrade libkde4-develUpgrade ruby-tkUpgrade mono-winformsUpgrade libkde4-32bitUpgrade kdelibs3-32bitUpgrade kdelibs4-docUpgrade kdelibs3-develUpgrade mono-data-postgresqlUpgrade bytefx-data-mysqlUpgrade libkde4-x86Upgrade kdelibs3-arts-32bitUpgrade libkdecore4Upgrade utempter-x86Upgrade mono-wcfUpgrade kdelibs3-x86Upgrade mono-extrasUpgrade mono-webUpgrade ruby-doc-riUpgrade ruby-test-suiteUpgrade kdelibs3-docUpgrade libkde4Upgrade libkdecore4-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kdelibs4c2aUpgrade thunderbird | Nov 8, 2024 | Jul 1, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub