ADVISORIES | September 20, 2007

Buffer Overflow in Mono BigInteger Montgomery Reduction Method

By Jason Larsen & Walter Pearce

VU#146292. Discovered: 07.25.07. Reported: 08.24.07. Disclosed: 09.20.07. An exploitable buffer overflow vulnerability exists in the Montgomery reduction method within the Mono Frameworks BigInteger Class (Mono.Math.BigInteger).

Launch PDF