Memory Corruption Vulnerability in GCC Product from GNU

CVE-2008-1367

Summary

In GCC versions 4.3.x, a flaw exists in the compilation of string manipulation functions such as memcpy and memmove for x86 and i386 architectures. This issue arises due to the absence of a 'cld' instruction, preventing the direction flag from being reset according to ABI conventions. Consequently, during signal handling in the Linux kernel, data may be copied in the wrong direction, which can lead to memory corruption that could be exploited by context-dependent attackers. It is crucial for users of affected GCC versions to be aware of this vulnerability and consider applying appropriate mitigations.

References