CVE:CVE-2009-2412
CNNVD:CNNVD-200908-530
Apache Portable Runtime（APR,Apache可移植运行库）是美国阿帕奇（Apache）基金会的一个为上层应用程序提供可跨越多个操作系统平台使用的底层支持接口库。
Apache Portable Runtime存在数字错误漏洞，该漏洞源于存在整数溢出，攻击者利用该漏洞可以导致链接到该库的应用崩溃或执行任意代码。
solution:Upgrade apache apr-util to a higher version than 0.9.1,0.9.2,0.9.2-dev,0.9.3,0.9.3-dev,0.9.4,0.9.5,0.9.6,0.9.7-dev,0.9.8,0.9.9,0.9.16,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.4-dev,1.3.5,1.3.6,1.3.6-dev,1.3.7,1.3.8,and avoid the version 0.9.1,0.9.2,0.9.2-dev,0.9.3,0.9.3-dev,0.9.4,0.9.5,0.9.6,0.9.7-dev,0.9.8,0.9.9,0.9.16,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.4-dev,1.3.5,1.3.6,1.3.6-dev,1.3.7,1.3.8; Upgrade apache portable_runtime to a higher version than 0.9.1,0.9.2,0.9.2-dev,0.9.3,0.9.3-dev,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7-dev,0.9.8,0.9.9,0.9.16-dev,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.4-dev,1.3.5,1.3.6,1.3.6-dev,1.3.7,1.3.8,and avoid the version 0.9.1,0.9.2,0.9.2-dev,0.9.3,0.9.3-dev,0.9.4,0.9.5,0.9.6,0.9.7,0.9.7-dev,0.9.8,0.9.9,0.9.16-dev,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.4-dev,1.3.5,1.3.6,1.3.6-dev,1.3.7,1.3.8