National Cyber Awareness System

Vulnerability Summary for CVE-2008-4316

Overview

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 34100

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/34100

External Source: CONFIRM

Name: http://svn.gnome.org/viewvc/glib?view=revision&revision=7973

Type: Advisory; Patch Information

Hyperlink:http://svn.gnome.org/viewvc/glib?view=revision&revision=7973

External Source: MLIST

Name: [oss-security] 20090312 [oCERT-2008-015] glib and glib-predecessor heap overflows

Type: Patch Information

Hyperlink:http://openwall.com/lists/oss-security/2009/03/12/2

External Source: MISC

Name: http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff

Type: Patch Information

Hyperlink:http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff

External Source: FEDORA

Name: FEDORA-2009-2688

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01113.html

External Source: XF

Name: glib-gbase64-bo(49272)

Hyperlink:http://xforce.iss.net/xforce/xfdb/49272

External Source: VUPEN

Name: ADV-2010-0528

Hyperlink:http://www.vupen.com/english/advisories/2010/0528

External Source: UBUNTU

Name: USN-738-1

Hyperlink:http://www.ubuntu.com/usn/usn-738-1

External Source: SECTRACK

Name: 1021884

Hyperlink:http://www.securitytracker.com/id?1021884

External Source: BUGTRAQ

Name: 20090312 rPSA-2009-0045-1 glib

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/501766/100/0/threaded

External Source: BUGTRAQ

Name: 20090312 [oCERT-2008-015] glib and glib-predecessor heap overflows

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/501712/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:0336

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0336.html

External Source: FEDORA

Name: FEDORA-2009-2657

Hyperlink:http://www.redhat.com/archives/fedora-package-announce/2009-April/msg00744.html

External Source: MLIST

Name: [oss-security] 20090317 Re: [oCERT-2008-015] glib and glib-predecessor heap overflows

Hyperlink:http://www.openwall.com/lists/oss-security/2009/03/16/2

External Source: MISC

Name: http://www.ocert.org/advisories/ocert-2008-015.html

Hyperlink:http://www.ocert.org/advisories/ocert-2008-015.html

External Source: MANDRIVA

Name: MDVSA-2009:080

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:080

External Source: DEBIAN

Name: DSA-1747

Hyperlink:http://www.debian.org/security/2009/dsa-1747

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2009-0045

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2009-0045

External Source: SECUNIA

Name: 38833

Hyperlink:http://secunia.com/advisories/38833

External Source: SECUNIA

Name: 38794

Hyperlink:http://secunia.com/advisories/38794

External Source: SECUNIA

Name: 34890

Hyperlink:http://secunia.com/advisories/34890

External Source: SECUNIA

Name: 34854

Hyperlink:http://secunia.com/advisories/34854

External Source: SECUNIA

Name: 34560

Hyperlink:http://secunia.com/advisories/34560

External Source: SECUNIA

Name: 34416

Hyperlink:http://secunia.com/advisories/34416

External Source: SECUNIA

Name: 34404

Hyperlink:http://secunia.com/advisories/34404

External Source: SECUNIA

Name: 34317

Hyperlink:http://secunia.com/advisories/34317

External Source: SECUNIA

Name: 34267

Hyperlink:http://secunia.com/advisories/34267

External Source: OVAL

Name: oval:org.mitre.oval:def:8360

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8360

External Source: OVAL

Name: oval:org.mitre.oval:def:11401

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11401

External Source: MLIST

Name: [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2010/000082.html

External Source: SUSE

Name: SUSE-SA:2009:026

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html

References to Check Content

Identifier:oval:org.mitre.oval:def:11401

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11401

Identifier:oval:org.mitre.oval:def:8360

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:8360