CVE-2010-1676
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.9%
exploitation probability
7.9%top 5% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Affected products
n/a · n/aReferences
http://archives.seul.org/or/announce/Dec-2010/msg00000.htmlhttp://blog.torproject.org/blog/tor-02128-released-security-patcheshttp://blog.torproject.org/blog/tor-02220-alpha-out-security-patcheshttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052657.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052690.htmlhttp://secunia.com/advisories/42536http://secunia.com/advisories/42667http://secunia.com/advisories/42783http://secunia.com/advisories/42916http://security.gentoo.org/glsa/glsa-201101-02.xmlhttp://securitytracker.com/id?1024910https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog