CVE-2006-0963

 

Published at: - 03-03-2006 12:02

Last modified: - 19-07-2022 08:35

Total changes: - 2

Description

Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://sourceforge.net/project/shownotes.php?release_id=397543
• 19051-Not Applicable, Patch, Vendor Advisory
• 16928-Third Party Advisory, VDB Entry
• ADV-2006-0800-Permissions Required
• stlport-strcpy-local-bo(25159)-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2006-0963

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures