|
IRIX is prone to an overflow condition. This issue is triggered when a single file is mapped to an excessive amount of files, which will result in an integer overflow. When handling a specially crafted i_count member in the inode structure, a local attacker can potentially cause a denial of service or execute arbitrary code.
|