{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-10-03T16:22:44", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-4895", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/", "refsource": "MISC", "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}, {"name": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog", "refsource": "CONFIRM", "url": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-4895", "datePublished": "2022-10-03T16:22:44", "dateReserved": "2022-10-03T00:00:00", "dateUpdated": "2022-10-03T16:22:44", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:csilvers:gperftools:*:*:*:*:*:*:*:*", "matchCriteriaId": "BEC9A6EA-129D-4A9E-A3F6-379FC64E4B22", "versionEndIncluding": "0.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:csilvers:gperftools:0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7BDB58C4-45E6-401B-9305-B422E7760FB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:csilvers:gperftools:0.2:*:*:*:*:*:*:*", "matchCriteriaId": "B0D76DB5-A8CA-4667-8B62-F38132D7A5C8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de enteros en TCMalloc (tcmalloc.cc) en gperftools antes v0.4 hace que sea m\u00e1s f\u00e1cil para los atacantes dependientes de contexto realizar ataques relacionados con la memoria, tales como desbordamientos de memoria a trav\u00e9s de un valor de tama\u00f1o grande, lo que causa que se asigne menos memoria de lo esperado."}], "id": "CVE-2005-4895", "lastModified": "2012-08-09T04:00:00.000", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-07-25T19:55:01.273", "references": [{"source": "cve@mitre.org", "url": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog"}, {"source": "cve@mitre.org", "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}