CVE-2008-4316

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.

🔗 References (62)

• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html
• secalert@redhathttp://lists.vmware.com/pipermail/security-announce/2010/000082.html
• secalert@redhathttp://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff
• secalert@redhathttp://openwall.com/lists/oss-security/2009/03/12/2
• secalert@redhathttp://secunia.com/advisories/34267
• secalert@redhathttp://secunia.com/advisories/34317
• secalert@redhathttp://secunia.com/advisories/34404
• secalert@redhathttp://secunia.com/advisories/34416
• secalert@redhathttp://secunia.com/advisories/34560
• secalert@redhathttp://secunia.com/advisories/34854
• secalert@redhathttp://secunia.com/advisories/34890
• secalert@redhathttp://secunia.com/advisories/38794
• secalert@redhathttp://secunia.com/advisories/38833
• secalert@redhathttp://svn.gnome.org/viewvc/glib?view=revision&revision=7973
• secalert@redhathttp://wiki.rpath.com/Advisories:rPSA-2009-0045