Total vulnerabilities in the database
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."
| Software | From | Fixed in |
|---|---|---|
| ruby-lang / ruby | - | 1.9.2-p136.x |
| ruby-lang / ruby | 1.9-r18423 | 1.9-r18423.x |
| ruby-lang / ruby | 1.9 | 1.9.x |
| ruby-lang / ruby | 1.9.0 | 1.9.0.x |
| ruby-lang / ruby | 1.9.0-r18423 | 1.9.0-r18423.x |
| ruby-lang / ruby | 1.9.0-0 | 1.9.0-0.x |
| ruby-lang / ruby | 1.9.0-1 | 1.9.0-1.x |
| ruby-lang / ruby | 1.9.0-2 | 1.9.0-2.x |
| ruby-lang / ruby | 1.9.0-20060415 | 1.9.0-20060415.x |
| ruby-lang / ruby | 1.9.0-20070709 | 1.9.0-20070709.x |
| ruby-lang / ruby | 1.9.1--rc2 | 1.9.1--rc2.x |
| ruby-lang / ruby | 1.9.1--preview_1 | 1.9.1--preview_1.x |
| ruby-lang / ruby | 1.9.1--preview_2 | 1.9.1--preview_2.x |
| ruby-lang / ruby | 1.9.1--p129 | 1.9.1--p129.x |
| ruby-lang / ruby | 1.9.1--p0 | 1.9.1--p0.x |
| ruby-lang / ruby | 1.9.1--p429 | 1.9.1--p429.x |
| ruby-lang / ruby | 1.9.1--rc1 | 1.9.1--rc1.x |
| ruby-lang / ruby | 1.9.1 | 1.9.1.x |
| ruby-lang / ruby | 1.9.1--p243 | 1.9.1--p243.x |
| ruby-lang / ruby | 1.9.1--p376 | 1.9.1--p376.x |
| ruby-lang / ruby | 1.9.2-dev | 1.9.2-dev.x |
| ruby-lang / ruby | 1.9.2 | 1.9.2.x |