What’s Vulnerable › Vulnerabilities

CVE-2009-0689

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 28.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-07-01 · updated 2026-06-16
• Weakness: CWE-119

Description

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.

Affected products

• FreeBSD: 6.4, 6.4-release, 6.4-release_p2, 6.4-release_p3, 6.4-release_p4, 6.4-release_p5 (+4)
• K-Meleon Project K-Meleon: 1.5.3
• Mozilla Firefox: 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6 (+12)
• Mozilla Seamonkey: 1.1.8
• Netbsd: 5.0
• OpenBSD: 4.5

References

• http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/gdtoa/gdtoaimp.h
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
• http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://rhn.redhat.com/errata/RHSA-2014-0311.html
• http://rhn.redhat.com/errata/RHSA-2014-0312.html
• http://secunia.com/advisories/37431
• http://secunia.com/advisories/37682
• http://secunia.com/advisories/37683
• http://secunia.com/advisories/38066
• http://secunia.com/advisories/38977

Get alerted when CVE-2009-0689 or the next vulnerability affects your stack