CVE:CVE-2012-2673
CNNVD:CNNVD-201206-537
Boehm GC是一种针对C和C++的保守垃圾回收器。
Boehm GC (libgc) 7.2之前版本中的malloc()和calloc()函数在实现上存在多个缓冲区溢出漏洞，该漏洞源于对用户提供的数据未经正确的边界值校验。攻击者可利用这些漏洞在使用受影响库中的受影响应用程序上下文中执行任意代码，攻击失败将导致拒绝服务。
solution:Upgrade boehm-demers-weiser garbage_collector to a higher version than *:alpha6,1.3,1.4,1.5,1.8,1.9,2.0,2.1,2.2,2.3,2.4,3.0,3.1,3.2,3.3,3.4,3.5,3.6,3.7,4.0,4.1,4.2,4.3,4.4,4.5,4.6,4.7,4.8,4.9,4.10,4.11,4.12,4.13,4.14,4.14:alpha1,4.14:alpha2,5.0,5.0:alpha1,5.0:alpha2,5.0:alpha3,5.0:alpha4,5.0:alpha6,5.0:alpha7,5.1,5.2,5.3,5.4,6.0,6.0:alpha1,6.0:alpha2,6.0:alpha3,6.0:alpha4,6.0:alpha5,6.0:alpha6,6.0:alpha7,6.0:alpha8,6.0:alpha9,6.1,6.1:alpha1,6.1:alpha2,6.1:alpha3,6.1:alpha4,6.1:alpha5,6.2,6.2:alpha1,6.2:alpha2,6.2:alpha3,6.2:alpha4,6.2:alpha5,6.2:alpha6,6.3,6.3:alpha1,6.3:alpha2,6.3:alpha3,6.3:alpha4,6.3:alpha5,6.3:alpha6,6.4,6.5,6.6,6.7,6.8,6.9,7.0,7.0:alpha1,7.0:alpha2,7.0:alpha3,7.0:alpha4,7.0:alpha5,7.0:alpha7,7.0:alpha9,7.1,7.1:alpha2,7.2:alpha2,7.2:alpha4,and avoid the version *:alpha6,1.3,1.4,1.5,1.8,1.9,2.0,2.1,2.2,2.3,2.4,3.0,3.1,3.2,3.3,3.4,3.5,3.6,3.7,4.0,4.1,4.2,4.3,4.4,4.5,4.6,4.7,4.8,4.9,4.10,4.11,4.12,4.13,4.14,4.14:alpha1,4.14:alpha2,5.0,5.0:alpha1,5.0:alpha2,5.0:alpha3,5.0:alpha4,5.0:alpha6,5.0:alpha7,5.1,5.2,5.3,5.4,6.0,6.0:alpha1,6.0:alpha2,6.0:alpha3,6.0:alpha4,6.0:alpha5,6.0:alpha6,6.0:alpha7,6.0:alpha8,6.0:alpha9,6.1,6.1:alpha1,6.1:alpha2,6.1:alpha3,6.1:alpha4,6.1:alpha5,6.2,6.2:alpha1,6.2:alpha2,6.2:alpha3,6.2:alpha4,6.2:alpha5,6.2:alpha6,6.3,6.3:alpha1,6.3:alpha2,6.3:alpha3,6.3:alpha4,6.3:alpha5,6.3:alpha6,6.4,6.5,6.6,6.7,6.8,6.9,7.0,7.0:alpha1,7.0:alpha2,7.0:alpha3,7.0:alpha4,7.0:alpha5,7.0:alpha7,7.0:alpha9,7.1,7.1:alpha2,7.2:alpha2,7.2:alpha4