CVE-2009-4012 Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/th...
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to (1) thbrk/thbrk.c and (2) thwbrk/thwbrk.c. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux.thai libthai | <= 0.1.12 | No fix listed |
| linux.thai libthai | = 0.1.0 | No fix listed |
| linux.thai libthai | = 0.1.1 | No fix listed |
| linux.thai libthai | = 0.1.2 | No fix listed |
| linux.thai libthai | = 0.1.3 | No fix listed |
| linux.thai libthai | = 0.1.4 | No fix listed |
| linux.thai libthai | = 0.1.5 | No fix listed |
| linux.thai libthai | = 0.1.6 | No fix listed |
| linux.thai libthai | = 0.1.7 | No fix listed |
| linux.thai libthai | = 0.1.8 | No fix listed |
| linux.thai libthai | = 0.1.9 | No fix listed |
| linux.thai libthai | = 0.1.10 | No fix listed |
| linux.thai libthai | = 0.1.11 | No fix listed |
| debian/libthai(Debian:12) | < 0.1.13-1 | 0.1.13-1 |
| debian/libthai(Debian:13) | < 0.1.13-1 | 0.1.13-1 |
| debian/libthai(Debian:14) | < 0.1.13-1 | 0.1.13-1 |
References
- linux.thai.net
- linux.thai.net
- SUSE-SR:2010:002 vendor-advisory
- 38196 third-party-advisory vendor-advisory
- 38213 third-party-advisory vendor-advisory
- 38235 third-party-advisory
- 38420 third-party-advisory
- security.debian.org patch
- security.debian.org patch
- USN-887-1 vendor-advisory
- DSA-1971 vendor-advisory
- 37822 vdb-entry
- Debian Security Tracker CVE-2009-4012 vendor-advisory