SecuritySpace - CVE-2015-7551

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-7551

Description: The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.

Test IDs: 1.3.6.1.4.1.25623.1.0.120622 1.3.6.1.4.1.25623.1.0.131180

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-7551
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
BugTraq ID: 76060
http://www.securityfocus.com/bid/76060
RedHat Security Advisories: RHSA-2018:0583
https://access.redhat.com/errata/RHSA-2018:0583

CVE ID:	CVE-2015-7551
Description:	The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression.
Test IDs:	1.3.6.1.4.1.25623.1.0.120622 1.3.6.1.4.1.25623.1.0.131180
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7551 http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html BugTraq ID: 76060 http://www.securityfocus.com/bid/76060 RedHat Security Advisories: RHSA-2018:0583 https://access.redhat.com/errata/RHSA-2018:0583