Security

» Added by:  SecurityReason Team

» Date:  08.01.2010

  Our team is pleased to release a new security notes for applications such as Matlab and J. In addition, a buffer overflow vulnerability has been diagnosed in libc/gdtoa.

All vulnerability related to the same issue in gdtoa, discovered in the standard MacOS X C language library in functions atof (3), strtod (3). The example, using the printf(1), as shown in

Multiple Vendors libc / gdtoa printf (3) Array Overrun
http://securityreason.com/achievement_securityalert/63

does not reflect the fact that there is faulty gdtoa in MacOS X. The vulnerability exists and we can see it when we put a long string as a parameter of function atof (char * wsk). Often in many applications, the possibility of introducing such a long string is limited, but practical use of this issue is proved and reported to the Apple team.
Notes related to application MatLab and J, describes the problem of issue in the gdtoa library.

MacOS X 10.5/10.6 Note:
http://securityreason.com/achievement_securityalert/81

Matlab Note:
http://securityreason.com/achievement_securityalert/80

J 6.02.023 Note:
http://securityreason.com/achievement_securityalert/79