CVE-2009-4124
EUVD-2009-409411.12.2009, 16:30
Heap-based buffer overflow in the rb_str_justify function in string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3) String#rjust. NOTE: some of these details are obtained from third party information.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 1.9.1:-p0 |
| ruby-lang | ruby | 1.9.1:-p129 |
| ruby-lang | ruby | 1.9.1:-p243 |
| ruby-lang | ruby | 1.9.1:-preview_1 |
| ruby-lang | ruby | 1.9.1:-preview_2 |
| ruby-lang | ruby | 1.9.1:-rc1 |
| ruby-lang | ruby | 1.9.1:-rc2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby1.8 |
| ||||||||||||||||||
| ruby1.9 |
| ||||||||||||||||||
| ruby1.9.1 |
|
Common Weakness Enumeration
References