CVE-2009-0689
Fixed in a distro release EPSS 28%
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
Products: k-meleon_project k-meleon, mozilla firefox, mozilla seamonkey, freebsd, netbsd, openbsd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mono | 4.2.1.102+dfsg2-4 |
| Debian 12 | nspr | 4.8-2 |
| Debian 13 | mono | 4.2.1.102+dfsg2-4 |
| Debian 13 | nspr | 4.8-2 |
| Debian 14 | mono | 4.2.1.102+dfsg2-4 |
| Debian 14 | nspr | 4.8-2 |
| Debian 5.0 | kdelibs | 4:3.5.10.dfsg.1-0lenny4 |
| Debian 5.0 | nspr | 4.7.1-5 |
| Debian 6.0 | mono | 2.6.7-5.1+deb6u2 |
| Debian 8 | mono | 3.2.8+dfsg-10+deb8u1 |
| Red Hat Enterprise Linux 3 | seamonkey | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-chat | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-debuginfo | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-devel | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-dom-inspector | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-js-debugger | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-mail | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nspr-devel | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 3 | seamonkey-nss-devel | 0:1.0.9-0.47.el3 |
| Red Hat Enterprise Linux 4 | firefox | 0:3.0.15-3.el4 |
| Red Hat Enterprise Linux 4 | firefox-debuginfo | 0:3.0.15-3.el4 |
| Red Hat Enterprise Linux 4 | kdelibs | 6:3.3.1-17.el4_8.1 |
| Red Hat Enterprise Linux 4 | kdelibs-debuginfo | 6:3.3.1-17.el4_8.1 |
| Red Hat Enterprise Linux 4 | kdelibs-devel | 6:3.3.1-17.el4_8.1 |
| Red Hat Enterprise Linux 4 | nspr | 0:4.7.6-1.el4_8 |
| Red Hat Enterprise Linux 4 | nspr-debuginfo | 0:4.7.6-1.el4_8 |
| Red Hat Enterprise Linux 4 | nspr-devel | 0:4.7.6-1.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-chat | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-debuginfo | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-devel | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-dom-inspector | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-js-debugger | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | seamonkey-mail | 0:1.0.9-50.el4_8 |
| Red Hat Enterprise Linux 4 | thunderbird | 0:1.5.0.12-25.el4 |
| Red Hat Enterprise Linux 4 | thunderbird-debuginfo | 0:1.5.0.12-25.el4 |
| Red Hat Enterprise Linux 5 | firefox | 0:3.0.15-3.el5_4 |
| Red Hat Enterprise Linux 5 | firefox-debuginfo | 0:3.0.15-3.el5_4 |
| Red Hat Enterprise Linux 5 | kdelibs | 6:3.5.4-25.el5_4.1 |
| Red Hat Enterprise Linux 5 | kdelibs-apidocs | 6:3.5.4-25.el5_4.1 |
| Red Hat Enterprise Linux 5 | kdelibs-debuginfo | 6:3.5.4-25.el5_4.1 |
| Red Hat Enterprise Linux 5 | kdelibs-devel | 6:3.5.4-25.el5_4.1 |
| Red Hat Enterprise Linux 5 | nspr | 0:4.7.6-1.el5_4 |
| Red Hat Enterprise Linux 5 | nspr-debuginfo | 0:4.7.6-1.el5_4 |
| Red Hat Enterprise Linux 5 | nspr-devel | 0:4.7.6-1.el5_4 |
| Red Hat Enterprise Linux 5 | php | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-bcmath | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-cli | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-common | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-dba | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-debuginfo | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-devel | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-gd | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-imap | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-ldap | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-mbstring | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-mysql | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-ncurses | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-odbc | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-pdo | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-pgsql | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-snmp | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-soap | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-xml | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | php-xmlrpc | 0:5.1.6-44.el5_10 |
| Red Hat Enterprise Linux 5 | thunderbird | 0:2.0.0.24-2.el5_4 |
| Red Hat Enterprise Linux 5 | thunderbird-debuginfo | 0:2.0.0.24-2.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner | 0:1.9.0.15-3.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner-debuginfo | 0:1.9.0.15-3.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner-devel | 0:1.9.0.15-3.el5_4 |
| Red Hat Enterprise Linux 5 | xulrunner-devel-unstable | 0:1.9.0.15-3.el5_4 |
| Red Hat rhel eus 5.9 | php | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-bcmath | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-cli | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-common | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-dba | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-debuginfo | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-devel | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-gd | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-imap | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-ldap | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-mbstring | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-mysql | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-ncurses | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-odbc | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-pdo | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-pgsql | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-snmp | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-soap | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-xml | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel eus 5.9 | php-xmlrpc | 0:5.1.6-40.el5_9.2 |
| Red Hat rhel mission critical 5.3 | php | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-bcmath | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-cli | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-common | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-dba | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-debuginfo | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-devel | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-gd | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-imap | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-ldap | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-mbstring | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-mysql | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-ncurses | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-odbc | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-pdo | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-pgsql | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-snmp | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-soap | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-xml | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.3 | php-xmlrpc | 0:5.1.6-23.6.el5_3 |
| Red Hat rhel mission critical 5.6 | php | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-bcmath | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-cli | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-common | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-dba | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-debuginfo | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-devel | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-gd | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-imap | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-ldap | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-mbstring | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-mysql | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-ncurses | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-odbc | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-pdo | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-pgsql | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-snmp | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-soap | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-xml | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel mission critical 5.6 | php-xmlrpc | 0:5.1.6-27.el5_6.7 |
| Red Hat rhel productivity 5 | thunderbird | 0:2.0.0.24-2.el5_4 |
| Red Hat rhel productivity 5 | thunderbird-debuginfo | 0:2.0.0.24-2.el5_4 |
| SUSE Linux Enterprise Desktop 11 SP4 | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Server 11 SP3 | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mono-core | 2.6.7-0.18.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mono-core | 2.6.7-0.18.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Server 11 SP4 | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Server 11 SP4 | mono-core | 2.6.7-0.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mono-core | 2.6.7-0.18.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mono-core | 2.6.7-0.16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mono-core | 2.6.7-0.18.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mono-core | 2.6.7-0.16.1 |