• info
• discussion
• exploit
• solution
• references

MPFR Library 'printf.c' Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor released MPFR 2.4.1 to address these issues. Please see the references for more information.


Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu libmpfr-dev_2.4.0-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-dev_2.4.0-1 ubuntu3.1_amd64.deb


• Ubuntu libmpfr-doc_2.4.0-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-doc_2.4.0-1 ubuntu3.1_all.deb


• Ubuntu libmpfr1ldbl_2.4.0-1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr1ldbl_2.4.0- 1ubuntu3.1_amd64.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libmpfr-dev_2.4.0-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/libmpfr-dev_2.4.0-1ubuntu3.1_ lpia.deb


• Ubuntu libmpfr-doc_2.4.0-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-doc_2.4.0-1 ubuntu3.1_all.deb


• Ubuntu libmpfr1ldbl_2.4.0-1ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/libmpfr1ldbl_2.4.0-1ubuntu3.1 _lpia.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libmpfr-dev_2.4.0-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/libmpfr-dev_2.4.0-1ubuntu3.1_ sparc.deb


• Ubuntu libmpfr-doc_2.4.0-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-doc_2.4.0-1 ubuntu3.1_all.deb


• Ubuntu libmpfr1ldbl_2.4.0-1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/libmpfr1ldbl_2.4.0-1ubuntu3.1 _sparc.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu lib64mpfr-dev_2.4.0-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/lib64mpfr-dev_2.4.0-1ubuntu3. 1_powerpc.deb


• Ubuntu lib64mpfr1_2.4.0-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/lib64mpfr1_2.4.0-1ubuntu3.1_p owerpc.deb


• Ubuntu libmpfr-dev_2.4.0-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/libmpfr-dev_2.4.0-1ubuntu3.1_ powerpc.deb


• Ubuntu libmpfr-doc_2.4.0-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-doc_2.4.0-1 ubuntu3.1_all.deb


• Ubuntu libmpfr1ldbl_2.4.0-1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/m/mpfr/libmpfr1ldbl_2.4.0-1ubuntu3.1 _powerpc.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu libmpfr-dev_2.4.0-1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-dev_2.4.0-1 ubuntu3.1_i386.deb


• Ubuntu libmpfr-doc_2.4.0-1ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr-doc_2.4.0-1 ubuntu3.1_all.deb


• Ubuntu libmpfr1ldbl_2.4.0-1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mpfr/libmpfr1ldbl_2.4.0- 1ubuntu3.1_i386.deb

MPFR MPFR 2.4

• MPFR mpfr-2.4.1.tar.gz
  http://mpfr.loria.fr/mpfr-current/mpfr-2.4.1.tar.gz