CVE-2009-0757

GNU MPFR 2.4.0 - Denial of Service via Buffer Overflow in mpfr_snprintf and mpfr_vsnprintf

Title source: llm
STIX 2.1

Description

Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial of service (crash) via the (1) mpfr_snprintf and (2) mpfr_vsnprintf functions.

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34204
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-772-1
Patch, Vendor Advisory x_refsource_confirm
http://mpfr.loria.fr/mpfr-2.4.1/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/33945
Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/03/02/4
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35028

Scores

EPSS 0.0155
EPSS Percentile 72.2%

Details

CWE
CWE-119
Status published
Products (1)
mpfr/gnu_mpfr 2.4.0
Published Mar 03, 2009
Tracked Since Feb 18, 2026