VDB
DEBIAN-CVE-2008-1391
DEBIAN-CVE-2008-1391
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | glibc | 0, 0, 0 |
| Debian:14 | glibc | 0, 0, 0 |
| Debian:12 | glibc | 0, 0, 0 |
| Debian:13 | glibc | 0, 0, 0 |
Timeline
- Mar 27, 2008 CVE Published
- Apr 28, 2026 CVE Updated