CVE-2005-4895 Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/google-perftools(Debian:12) | < 0.7-1 | 0.7-1 |
| debian/google-perftools(Debian:13) | < 0.7-1 | 0.7-1 |
| debian/google-perftools(Debian:14) | < 0.7-1 | 0.7-1 |
| csilvers gperftools | <= 0.3 | No fix listed |
| csilvers gperftools | = 0.1 | No fix listed |
| csilvers gperftools | = 0.2 | No fix listed |
References
- Debian Security Tracker CVE-2005-4895 vendor-advisory
- code.google.com
- kqueue.org