Back to Database
Status published
High
CVE-2010-1620
Integer overflow in the load_iface function in Tools/gdomap.c in gdomap...
Vulnerability Description
Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1620
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/39746
- http://savannah.gnu.org/bugs/?29755
- http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336
- http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz
- http://marc.info/?l=oss-security&m=127325778527537&w=2
- http://marc.info/?l=oss-security&m=127324274005709&w=2
- https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108
Affected Vendor
gnustep
View all reports →Affected Software
gnustep base
Vulnerable Versions:
0, 1.11.2, 1.12.0, 1.13.0, 1.14.0, 1.15.0, 1.15.1, 1.15.2, 1.15.4, 1.17.0, 1.18.0, 1.19.0, 1.19.1, 1.19.2
Timeline
Official Publish:
May 12th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.