CVE-2008-4316

Description

Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.

Affected Platforms

Weakness Type

CWE-189

References

• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html
• http://lists.vmware.com/pipermail/security-announce/2010/000082.html
• http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff
• http://openwall.com/lists/oss-security/2009/03/12/2
• http://secunia.com/advisories/34267
• http://secunia.com/advisories/34317