Ruby Numeric Errors Vulnerability - CVE-2011-0188 - Vulnerability Database

Ruby Numeric Errors Vulnerability - CVE-2011-0188

Medium

Reference: CVE-2011-0188

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-0188

Title: Ruby Numeric Errors Vulnerability

Overview:

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier as used on Apple Mac OS X before 10.6.7 and other platforms does not properly allocate memory which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process related to an quotinteger truncation issue.quot