CVE:CVE-2009-4124
CNNVD:CNNVD-200912-165
iRuby string.c的rb_str_justify函数存在堆缓冲溢出。攻击者可以借助包含(1) String#ljust, (2) String#center, 或(3) String#rjust的未明向量，导致执行任意代码。
solution:Upgrade ruby-lang ruby to a higher version than 1.9.1:-p0,1.9.1:-p129,1.9.1:-p243,1.9.1:-preview_1,1.9.1:-preview_2,1.9.1:-rc1,1.9.1:-rc2,and avoid the version 1.9.1:-p0,1.9.1:-p129,1.9.1:-p243,1.9.1:-preview_1,1.9.1:-preview_2,1.9.1:-rc1,1.9.1:-rc2