{"api_version":"1","generated_at":"2026-07-23T10:46:51+00:00","cve":"CVE-2010-1620","urls":{"html":"https://cve.report/CVE-2010-1620","api":"https://cve.report/api/cve/CVE-2010-1620.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-1620","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-1620"},"summary":{"title":"CVE-2010-1620","description":"Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.","state":"PUBLISHED","assigner":"redhat","published_at":"2010-05-12 11:46:51","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-189","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://marc.info/?l=oss-security&m=127324274005709&w=2","name":"http://marc.info/?l=oss-security&m=127324274005709&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Re: [oss-security] CVE Assignment (gnustep)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://savannah.gnu.org/bugs/?29755","name":"http://savannah.gnu.org/bugs/?29755","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"GNUstep - Bugs: Exiting with Error [Savannah]","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://secunia.com/advisories/39746","name":"http://secunia.com/advisories/39746","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"GNUStep Base \"gdomap\" Integer Overflow and Information Disclosure - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz","name":"http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"application/x-tar","httpstatus":"200","archivestatus":"200"},{"url":"https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108","name":"https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Bug #573108 “gdomap multiple local information disclosure vulner...” : Bugs : gnustep-base package : Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336","name":"http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Gmane Loom","mime":"text/html","httpstatus":"522","archivestatus":"200"},{"url":"http://marc.info/?l=oss-security&m=127325778527537&w=2","name":"http://marc.info/?l=oss-security&m=127325778527537&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Re: [oss-security] CVE Assignment (gnustep)' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1620","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1620","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.11.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.12.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.13.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.14.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.15.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.15.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.15.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.15.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.17.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.18.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.19.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.19.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"1.19.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"1620","vulnerable":"1","versionEndIncluding":"1.19.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gnustep","cpe5":"gnustep_base","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T01:28:42.096Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"39746","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/39746"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://savannah.gnu.org/bugs/?29755"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz"},{"name":"[oss-security] 20100507 Re: CVE Assignment (gnustep)","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=127325778527537&w=2"},{"name":"[oss-security] 20100507 Re: CVE Assignment (gnustep)","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://marc.info/?l=oss-security&m=127324274005709&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-05-12T01:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"39746","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/39746"},{"tags":["x_refsource_CONFIRM"],"url":"http://savannah.gnu.org/bugs/?29755"},{"tags":["x_refsource_CONFIRM"],"url":"http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336"},{"tags":["x_refsource_CONFIRM"],"url":"http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz"},{"name":"[oss-security] 20100507 Re: CVE Assignment (gnustep)","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=127325778527537&w=2"},{"name":"[oss-security] 20100507 Re: CVE Assignment (gnustep)","tags":["mailing-list","x_refsource_MLIST"],"url":"http://marc.info/?l=oss-security&m=127324274005709&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2010-1620","datePublished":"2010-05-12T01:00:00.000Z","dateReserved":"2010-04-29T00:00:00.000Z","dateUpdated":"2024-08-07T01:28:42.096Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-05-12 11:46:51","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-189","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:*:*:*:*:*:*:*:*","versionEndIncluding":"1.19.3","matchCriteriaId":"0D419B9A-A8AB-402E-8CC6-CF7475712052"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"86EAF8AB-DF06-4E78-864A-AABB609E16A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.12.0:*:*:*:*:*:*:*","matchCriteriaId":"0D19B51A-B4E1-4918-B66C-CAADBDCC7E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.13.0:*:*:*:*:*:*:*","matchCriteriaId":"FDED7FD1-D215-4A7B-8AB5-5AE0768F4D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"DE32DE90-EF3F-4BB5-9F88-A9AB81B0C9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"E7A123E2-1929-42F2-89A4-B7F72ED1A9FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.15.1:*:*:*:*:*:*:*","matchCriteriaId":"FAC64F8D-670C-4148-A75A-BFE612CA2A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.15.2:*:*:*:*:*:*:*","matchCriteriaId":"A90755C5-7070-4143-834F-FACDFFE4668E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1B5EE26C-539D-4B5D-9781-1A45C74A1F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.17.0:*:*:*:*:*:*:*","matchCriteriaId":"1DB4A798-E17F-4269-91CC-DD41448A12C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.18.0:*:*:*:*:*:*:*","matchCriteriaId":"C79ABFE1-9A5E-4A20-B977-D203854BBC0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"D5AFAEDC-5517-4B20-B461-A841183246C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"AD0DF768-8DDB-44AB-A17D-D095A11BDCC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnustep:gnustep_base:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"45AB091A-B185-4404-B022-A57E7780FE02"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"1620","Ordinal":"1","Title":"CVE-2010-1620","CVE":"CVE-2010-1620","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"1620","Ordinal":"1","NoteData":"Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.","Type":"Description","Title":"CVE-2010-1620"},{"CveYear":"2010","CveId":"1620","Ordinal":"2","NoteData":"2010-05-11","Type":"Other","Title":"Published"}]}}}