CVE-2000-1219 The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU g++ | <= 3.3.3 | No fix listed |
| GNU gcc | <= 3.3.3 | No fix listed |
| debian/gcc-3.3(Debian:12) | < 1:3.3.4-1 | 1:3.3.4-1 |
References
- [gcc-bugs] 20020506 c/6586: -ftrapv doesn't catch multiplication overflow mailing-list
- VU#540517 third-party-advisory us-government-resource
- Debian Security Tracker CVE-2000-1219 vendor-advisory