Description
Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression to false when i equals -1, which might introduce integer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.
References
- 22953 vdb-entry
- 20060206 [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability mailing-list
- bcb-compiler-integer-overflow(24514) vdb-entry
- 1015588 vdb-entry
- http://www.xfocus.net/releases/200602/a849.html