VDB

GCVE-110-CERTCC-2002-192995

GCVE-110-CERTCC-2002-192995
Advisory Published
Vulnetix · Advisory published July 31, 2002
There is an integer overflow present in the xdr_array() function distributed as part of the Sun Microsystems XDR library. This overflow has been shown to lead to remotely exploitable buffer overflows in multiple applications, leading to the execution of arbitrary code. Although the library was originally distributed by Sun Microsystems, multiple vendors have included the vulnerable code in their own implementations.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact14population15exploitation10widely_known15score_current27.286875ease_of_exploitation14

Aliases

CVE-2002-0391

References

Integer overflow in xdr_array() function when deserializing the XDR stream
advisory
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
url
Integer overflow in xdr_array() function when deserializing the XDR stream
advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›