Page 2 of 13 results (0.008 seconds)

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0

20 Apr 2006 — fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_EXPR and NE_EXPR, which might introduce buffer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.NOTE: the vendor states that the essence of the issue is "not correctly interpreting an offset to a pointer as a signed value." • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356896 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0

01 Nov 2000 — The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows. • http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

02 Jan 1998 — gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files. • http://marc.info/?l=bugtraq&m=88419592307388&w=2 •