CVE-2006-1902 — LOW (2.1) — White Hats Nepal

Vulnerability Description

fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_EXPR and NE_EXPR, which might introduce buffer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.NOTE: the vendor states that the essence of the issue is "not correctly interpreting an offset to a pointer as a signed value."

CVSS Score

2.1

LOW

AV:L/AC:L/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Gnu	Gcc	4.1

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2006-1902?

CVE-2006-1902 is a vulnerability with a CVSS score of 2.1 (LOW). fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_...

How severe is CVE-2006-1902?

CVE-2006-1902 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2006-1902?

Check the references section above for vendor advisories and patch information. Affected products include: Gnu Gcc.