CVE-2009-4880
glibc < 2.10.1 - Denial of Service via strfmon Format String Integer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4880. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary The exploit demonstrates an integer overflow in GNU glibc's money_format function via PHP, which can lead to arbitrary code execution or denial-of-service. The PoC uses specific format strings to trigger the overflow.
Description
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
Exploits (1)
The exploit demonstrates an integer overflow in GNU glibc's money_format function via PHP, which can lead to arbitrary code execution or denial-of-service. The PoC uses specific format strings to trigger the overflow.