CVE-2011-0188

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms…

published March 23, 2011

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03025 · 87.3th percentile
Published
2011-03-23T01:00Z
EPSS history
Timeline
  • 23 MAR 01:00Z
    The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms…
    cvelistv5