CVE-2010-1620

critical

Description

Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.

References

http://secunia.com/advisories/39746

http://savannah.gnu.org/bugs/?29755

http://marc.info/?l=oss-security&m=127325778527537&w=2

http://marc.info/?l=oss-security&m=127324274005709&w=2

http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz

Details

Source: Mitre, NVD

Published: 2010-05-12

Updated: 2010-05-12

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical