ruby-lang ruby 1.9.0-2 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in Ruby 1.9.x prior to 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode value that is not properly handled when constructing the filenames of the backup files.

Ruby-lang Ruby 1.9.0-0 Ruby-lang Ruby 1.9.1 Ruby-lang Ruby 1.9.0-1 Ruby-lang Ruby 1.9.0-2 Ruby-lang Ruby 1.9.0-20060415 Ruby-lang Ruby 1.9.0-20070709

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and previous versions, as used on Apple Mac OS X prior to 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent malicious users to execute arbitrary code or ...

Ruby-lang Ruby 1.9.1 Ruby-lang Ruby 1.9.2 Ruby-lang Ruby 1.9.0-20060415 Ruby-lang Ruby Ruby-lang Ruby 1.9.0-0 Ruby-lang Ruby 1.9 Ruby-lang Ruby 1.9.0-20070709 Ruby-lang Ruby 1.9.0-1 Ruby-lang Ruby 1.9.0 Ruby-lang Ruby 1.9.0-2

Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and previous versions, 1.8.5 prior to 1.8.5-p231, 1.8.6 prior to 1.8.6-p230, 1.8.7 prior to 1.8.7-p22, and 1.9.0 prior to 1.9.0-2, when using NTFS or FAT filesystems, allows remote malicious users to read arbitrary CGI fi...

Ruby-lang Ruby 1.8.5 Ruby-lang Ruby 1.8.6 Ruby-lang Ruby

Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and previous versions, 1.8.5 prior to 1.8.5-p231, 1.8.6 prior to 1.8.6-p230, 1.8.7 prior to 1.8.7-p22, and 1.9.0 prior to 1.9.0-2; and (2) the rb_ary_replace function in 1.6.x allows context-dependent malicious user...

Ruby-lang Ruby Debian Debian Linux 4.0 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 6.06

Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and previous versions, 1.8.5 prior to 1.8.5-p231, 1.8.6 prior to 1.8.6-p230, 1.8.7 prior to 1.8.7-p22, and 1.9.0 prior to 1.9.0-2 allow context-dependent malicious users to execute arbitrary code or cause ...

Ruby-lang Ruby Debian Debian Linux 4.0 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 8.04

The rb_str_format function in Ruby 1.8.4 and previous versions, 1.8.5 prior to 1.8.5-p231, 1.8.6 prior to 1.8.6-p230, 1.8.7 prior to 1.8.7-p22, and 1.9.0 prior to 1.9.0-2 allows context-dependent malicious users to trigger memory corruption via unspecified vectors related to allo...

Ruby-lang Ruby Debian Debian Linux 4.0 Canonical Ubuntu Linux 7.10 Canonical Ubuntu Linux 6.06 Canonical Ubuntu Linux 7.04 Canonical Ubuntu Linux 8.04

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook