• info
• discussion
• exploit
• solution
• references

json Gem for Ruby Unspecified Stack Buffer Overflow Vulnerability

json Gem for Ruby is prone to an unspecified stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

json Gem 1.0.4 is vulnerable; other versions may also be affected.