Description
Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp.
References
- stlport-strcpy-local-bo(25159) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=397543
- 16928 vdb-entry
- 19051 third-party-advisory
- ADV-2006-0800 vdb-entry