Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2008-1391

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.

  • Published: Mar 27, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-1391
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
freebsd / freebsd 7.0-pre-release 7.0-pre-release.x
netbsd / netbsd 4.0 4.0.x
freebsd / freebsd 7.0_beta4 7.0_beta4.x
freebsd / freebsd 7.0 7.0.x
freebsd / freebsd 6.0_p5_release 6.0_p5_release.x
freebsd / freebsd 6.0 6.0.x
freebsd / freebsd 7.0_releng 7.0_releng.x
freebsd / freebsd 6.0-release 6.0-release.x
freebsd / freebsd 6.0-stable 6.0-stable.x