Re: possible flaw in widely used strtod.c implementation

[Pierre Joye <pierre.php () gmail com>]

hi,

Little head up on another affected projected:

http://www.exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308/

Cheers,

On Tue, Jan 11, 2011 at 1:27 AM, Steven M. Christey
<coley () rcf-smtp mitre org> wrote:
> Since this problem stems from a single codebase, strtod.c, so it gets a
> single CVE identifier (already assigned CVE-2010-4645).  The CVE description
> will "blame" strtod.c and mention PHP, and any other high-profile software
> that is discovered to use the same vulnerable, shared code.
>
> - Steve



-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org