Description
Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent attackers to cause a denial of service (crash) via the (1) mpfr_snprintf and (2) mpfr_vsnprintf functions.
References
- 34204 third-party-advisory
- USN-772-1 vendor-advisory
- http://mpfr.loria.fr/mpfr-2.4.1/
- 33945 vdb-entry
- [oss-security] 20090302 CVE Request: mpfr (Buffer Overflow) mailing-list
- 35028 third-party-advisory