CVE-2009-0608 - Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines

Back Back to CVE browser

HIGH

Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines

Published Feb 17, 2009

7.2

HIGH

CVSS 2.0

EPSS 0.36%

Description

Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-189

References (4)

http://www.securityfocus.com/archive/1/500753/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/33695
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0611
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48842
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/archive/1/500753/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/33695		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0611		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48842		vdb-entryx_refsource_XF