CVE-2011-0188 : The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p1

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."

Published 2011-03-23 02:00:06

Updated 2011-08-24 03:15:07

Source Apple Inc.

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2011-0188

Ruby-lang » Ruby
Versions up to, including, (<=) 1.9.2-p136
cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0
cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0 Update R18423
cpe:2.3:a:ruby-lang:ruby:1.9.0:r18423:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9
cpe:2.3:a:ruby-lang:ruby:1.9:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -rc1
cpe:2.3:a:ruby-lang:ruby:1.9.1:-rc1:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -preview 2
cpe:2.3:a:ruby-lang:ruby:1.9.1:-preview_2:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -rc2
cpe:2.3:a:ruby-lang:ruby:1.9.1:-rc2:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -p129
cpe:2.3:a:ruby-lang:ruby:1.9.1:-p129:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -preview 1
cpe:2.3:a:ruby-lang:ruby:1.9.1:-preview_1:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -p243
cpe:2.3:a:ruby-lang:ruby:1.9.1:-p243:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -P0
cpe:2.3:a:ruby-lang:ruby:1.9.1:-p0:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.2 Update DEV
cpe:2.3:a:ruby-lang:ruby:1.9.2:dev:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1
cpe:2.3:a:ruby-lang:ruby:1.9.1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.2
cpe:2.3:a:ruby-lang:ruby:1.9.2:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0-0
cpe:2.3:a:ruby-lang:ruby:1.9.0-0:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0-1
cpe:2.3:a:ruby-lang:ruby:1.9.0-1:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0-2
cpe:2.3:a:ruby-lang:ruby:1.9.0-2:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0-20060415
cpe:2.3:a:ruby-lang:ruby:1.9.0-20060415:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.0-20070709
cpe:2.3:a:ruby-lang:ruby:1.9.0-20070709:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -p376
cpe:2.3:a:ruby-lang:ruby:1.9.1:-p376:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9.1 Update -p429
cpe:2.3:a:ruby-lang:ruby:1.9.1:-p429:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6
Ruby-lang » Ruby » Version: 1.9 Update R18423
cpe:2.3:a:ruby-lang:ruby:1.9:r18423:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: 10.5.8
When used together with: Apple » Mac Os X » Version: 10.6.0
When used together with: Apple » Mac Os X » Version: 10.6.1
When used together with: Apple » Mac Os X » Version: 10.6.2
When used together with: Apple » Mac Os X » Version: 10.6.3
When used together with: Apple » Mac Os X » Version: 10.6.4
When used together with: Apple » Mac Os X » Version: 10.6.5
When used together with: Apple » Mac Os X » Version: 10.6.6
When used together with: Apple » Mac Os X Server » Version: 10.5.8
When used together with: Apple » Mac Os X Server » Version: 10.6.0
When used together with: Apple » Mac Os X Server » Version: 10.6.1
When used together with: Apple » Mac Os X Server » Version: 10.6.2
When used together with: Apple » Mac Os X Server » Version: 10.6.3
When used together with: Apple » Mac Os X Server » Version: 10.6.4
When used together with: Apple » Mac Os X Server » Version: 10.6.5
When used together with: Apple » Mac Os X Server » Version: 10.6.6

Exploit prediction scoring system (EPSS) score for CVE-2011-0188

EPSS FAQ

2.85%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 89 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2011-0188

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2011-0188

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-0188

http://www.redhat.com/support/errata/RHSA-2011-0909.html

Support

CVEs referencing this url
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ext/bigdecimal/bigdecimal.c?r1=29364&r2=30993

ViewVC Exception
Patch;Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:098

mandriva.com

CVEs referencing this url
http://support.apple.com/kb/HT4581

About the security content of Mac OS X v10.6.7 and Security Update 2011-001 - Apple Support
Patch

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=682332

682332 – (CVE-2011-0188) CVE-2011-0188 ruby: memory corruption in BigDecimal on 64bit platforms
Patch
http://www.redhat.com/support/errata/RHSA-2011-0908.html

Support

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2011-0910.html

Support

CVEs referencing this url
http://www.securitytracker.com/id?1025236

Ruby 64-bit BigDecimal Integer Truncation Flaw Lets Remote Users Execute Arbitrary Code - SecurityTracker
http://www.mandriva.com/security/advisories?name=MDVSA-2011:097

mandriva.com

CVEs referencing this url
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Apple - Lists.apple.com
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2011-0188

Products affected by CVE-2011-0188

Exploit prediction scoring system (EPSS) score for CVE-2011-0188

CVSS scores for CVE-2011-0188

CWE ids for CVE-2011-0188

References for CVE-2011-0188