Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libsystem | — | Apply OS X security update 2010-002Upgrade macOS to the latest version | Dec 16, 2011 | Jul 1, 2009 |
| Centos_linux | — | Upgrade kdelibs-apidocsUpgrade php-mbstringUpgrade php-commonUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-snmpUpgrade php-xmlUpgrade php-odbcUpgrade php-cliUpgrade php-imapUpgrade php-dbaUpgrade phpUpgrade php-ldapUpgrade php-develUpgrade kdelibs-develUpgrade thunderbirdUpgrade php-pdoUpgrade php-ncursesUpgrade php-xmlrpcUpgrade php-soapUpgrade php-bcmathUpgrade kdelibsUpgrade php-gd | Dec 1, 2016 | Jul 1, 2009 |
| Debian | — | Upgrade monoUpgrade nspr | Mar 31, 2017 | Jul 1, 2009 |
| Freebsd | — | Upgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade monoUpgrade linux-thunderbirdUpgrade linux-operaUpgrade opera | Dec 10, 2025 | Dec 1, 2009 |
| Mfsa2009 59 | — | Upgrade to Mozilla Firefox version 3.0.15Upgrade to Mozilla Firefox version 3.5.4 | Jun 14, 2012 | Jul 1, 2009 |
| Oracle_linux | — | Upgrade php-ncursesUpgrade phpUpgrade php-gdUpgrade php-develUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-ldapUpgrade php-pdoUpgrade php-bcmathUpgrade php-soapUpgrade php-dbaUpgrade kdelibs-develUpgrade kdelibsUpgrade php-mbstringUpgrade php-snmpUpgrade php-imapUpgrade kdelibs-apidocsUpgrade php-odbcUpgrade php-mysqlUpgrade php-xmlUpgrade php-cliUpgrade php-common | Oct 16, 2024 | Jul 1, 2009 |
| Suse | — | Upgrade kdelibs3Upgrade libkdecore4-develUpgrade mono-data-sybaseUpgrade libkdecore4-x86Upgrade mono-data-firebirdUpgrade monodoc-coreUpgrade kdelibs3-default-styleUpgrade ruby-examplesUpgrade kdelibs4-coreUpgrade ruby-doc-htmlUpgrade mono-jscriptUpgrade mono-data-sqliteUpgrade ibm-data-db2Upgrade utempter-32bitUpgrade kdelibs3-arts-x86Upgrade utempterUpgrade mono-winfxcoreUpgrade kdelibs3-default-style-x86Upgrade kdelibs3-default-style-32bitUpgrade kdelibs4Upgrade rubyUpgrade mono-coreUpgrade mono-develUpgrade kdelibs3-artsUpgrade mono-webUpgrade ruby-tkUpgrade kdelibs3-docUpgrade bytefx-data-mysqlUpgrade libkde4-develUpgrade mono-dataUpgrade libkde4-x86Upgrade libkdecore4Upgrade ruby-doc-riUpgrade mono-winformsUpgrade kdelibs3-32bitUpgrade ruby-develUpgrade mono-extrasUpgrade ruby-test-suiteUpgrade mono-locale-extrasUpgrade mono-data-oracleUpgrade libkde4-32bitUpgrade mono-nunitUpgrade libkdecore4-32bitUpgrade kdelibs3-develUpgrade mono-data-postgresqlUpgrade kdelibs4-docUpgrade utempter-x86Upgrade kdelibs3-x86Upgrade mono-wcfUpgrade kdelibs3-arts-32bitUpgrade libkde4 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade thunderbirdUpgrade kdelibs4c2a | Nov 8, 2024 | Jul 1, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub