Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a string that is converted to a floating point value, as demonstrated using (1) the to_f method or (2) JSON.parse.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-11-23T19:00:00

Updated: 2024-08-06T16:30:50.071Z

Reserved: 2013-06-12T00:00:00

Link: CVE-2013-4164

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-11-23T19:55:03.517

Modified: 2024-11-21T01:55:00.143

Link: CVE-2013-4164

cve-icon Redhat

Severity : Critical

Publid Date: 2013-11-22T00:00:00Z

Links: CVE-2013-4164 - Bugzilla