Lucene search
FreeBSD4B3A7E70-AFCE-11E5-B864-14DAE9D210B8HistoryDec 19, 2015 - 12:00 a.m.
mono -- DoS and code execution
2015-12-1900:00:00
vuxml.freebsd.org
25
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.97 High
EPSS
Percentile
99.7%
NCC Group reports:
An attacker who can cause a carefully-chosen string to be
converted to a floating-point number can cause a crash and potentially
induce arbitrary code execution.
References
Related
nessus
nessus
Fedora 23 : mono-4.0.5-2.fc23 (2015-6dec4e6d5f)
2016-03-04 00:00:00
Debian DSA-1998-1 : kdelibs - buffer overflow
2010-02-24 00:00:00
SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 6691)
2009-12-08 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0013)
2016-01-14 00:00:00
SLES11: Security update for Mozilla
2009-11-11 00:00:00
RedHat Security Advisory RHSA-2009:1601
2009-12-03 00:00:00
centos
centos
kdelibs security update
2009-11-25 14:52:10
php security update
2014-03-19 01:15:26
seamonkey security update
2009-10-28 13:15:48
securityvulns
securityvulns
BSD-based systems (FreeBSD, NetBSD, OpenBSD) index array overflow
2010-01-08 00:00:00
Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)
2009-12-15 00:00:00
Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)
2009-12-15 00:00:00
osv
osv
mono - security update
2018-11-01 00:00:00
mono - security update
2015-12-30 00:00:00
kdelibs - arbitrary code execution
2010-02-17 00:00:00
packetstorm
packetstorm
Sun Solaris 10 libc/*convert Buffer Overflow
2010-05-22 00:00:00
Flock 2.5.2 Remote Array Overrun
2009-12-12 00:00:00
J 6.02.023 Array Overrun
2010-01-09 00:00:00
mageia
mageia
Updated mono packages fix security vulnerability
2016-01-14 04:44:39
seebug
seebug
Sun Solaris多个libc库数字转换函数缓冲区溢出漏洞
2010-05-25 00:00:00
多个BSD系统gdtoa/misc.c文件内存破坏漏洞
2009-06-30 00:00:00
Sunbird 0.9 - Array Overrun (code execution) 0day
2014-07-01 00:00:00
redhat
redhat
(RHSA-2009:1601) Critical: kdelibs security update
2009-11-24 00:00:00
(RHSA-2014:0312) Critical: php security update
2014-03-18 00:00:00
(RHSA-2014:0311) Critical: php security update
2014-03-18 00:00:00
prion
prion
Heap overflow
2009-07-01 13:00:00
debiancve
debiancve
CVE-2009-0689
2009-07-01 13:00:01
opera
opera
Heap buffer overflow in string to number conversion
2009-11-20 00:00:00
oraclelinux
oraclelinux
kdelibs security update
2009-11-24 00:00:00
php security update
2014-03-18 00:00:00
ubuntu
ubuntu
KDE vulnerabilities
2009-12-11 00:00:00
Thunderbird vulnerabilities
2010-03-18 00:00:00
chrome
chrome
Stable Channel Update
2009-09-30 00:00:00
threatpost
threatpost
'High Risk' Flaw Fixed in Google Chrome
2009-10-06 22:32:02
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:49
nvd
nvd
CVE-2009-0689
2009-07-01 13:00:01
CVE-2009-1563
2009-10-29 14:30:00
cve
cve
CVE-2009-0689
2009-07-01 13:00:01
CVE-2009-1563
2009-10-29 14:30:00
fedora
fedora
[SECURITY] Fedora 23 Update: mono-4.0.5-2.fc23
2015-12-29 22:26:22
[SECURITY] Fedora 11 Update: seamonkey-1.1.19-1.fc11
2010-04-21 21:53:31
debian
debian
[SECURITY] [DLA 376-1] mono security update
2015-12-30 11:29:31
[SECURITY] [DSA 1998-1] New kdelibs packages fix arbitrary code execution
2010-02-17 18:25:18
[Backports-security-announce] Security Update for nsrp
2010-07-21 08:26:53
cvelist
cvelist
CVE-2009-0689
2009-07-01 12:26:00
mozilla
mozilla
Heap buffer overflow in string to number conversion — Mozilla
2009-10-27 00:00:00
exploitpack
exploitpack
Sunbird 0.9 - Array Overrun Code Execution
2009-12-11 00:00:00
Opera 10.01 - Remote Array Overrun
2009-11-19 00:00:00
KDE KDELibs 4.3.3 - Remote Array Overrun
2009-11-19 00:00:00
exploitdb
exploitdb
Sunbird 0.9 - Array Overrun Code Execution
2009-12-11 00:00:00
Opera 10.01 - Remote Array Overrun
2009-11-19 00:00:00
K-Meleon 1.5.3 - Remote Array Overrun
2009-11-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-0689
2009-07-01 00:00:00
hackerone
hackerone
Ruby: Ruby: Heap Overflow in Floating Point Parsing
2013-11-22 00:00:00
suse
suse
Security update for ruby (critical)
2013-12-05 18:04:15
freebsd
freebsd
opera -- multiple vulnerabilities
2009-11-23 00:00:00
mozilla -- multiple vulnerabilities
2010-03-16 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.97 High
EPSS
Percentile
99.7%
Related for 4B3A7E70-AFCE-11E5-B864-14DAE9D210B8