Posts Tagged: ruby-1.8
-
CVE-2008-2376: Integer Overflows in Ruby's Array#fill
An exploration of CVE-2008-2376, how integer overflows manifest in C-based Ruby implementations, and why upgrading is the only sustainable defense.
-
CVE-2008-3657: Ruby DL Module Taint Bypass
Learn about CVE-2008-3657, a critical vulnerability in Ruby 1.8 and 1.9 where missing taint checks in the DL module allowed attackers to bypass $SAFE levels and achieve remote code execution.