Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2010-2489

Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode value that is not properly handled when constructing the filenames of the backup files.

  • Published: Jul 12, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-2489
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
ruby-lang / ruby 1.9.0-0 1.9.0-0.x
ruby-lang / ruby 1.9.0-1 1.9.0-1.x
ruby-lang / ruby 1.9.0-2 1.9.0-2.x
ruby-lang / ruby 1.9.0-20060415 1.9.0-20060415.x
ruby-lang / ruby 1.9.0-20070709 1.9.0-20070709.x
ruby-lang / ruby 1.9.1--rc2 1.9.1--rc2.x
ruby-lang / ruby 1.9.1--preview_1 1.9.1--preview_1.x
ruby-lang / ruby 1.9.1--p429 1.9.1--p429.x
ruby-lang / ruby 1.9.1--rc1 1.9.1--rc1.x
ruby-lang / ruby 1.9.1--p129 1.9.1--p129.x
ruby-lang / ruby 1.9.1--p0 1.9.1--p0.x
ruby-lang / ruby 1.9.1--preview_2 1.9.1--preview_2.x
ruby-lang / ruby 1.9.1--p243 1.9.1--p243.x
ruby-lang / ruby 1.9.1--p376 1.9.1--p376.x