CVE-2010-2489

Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode value that is not properly handled when constructing the filenames of the backup files.

• CWE-119

• http://osdir.com/ml/ruby-talk/2010-07/msg00095.html
• http://secunia.com/advisories/40442Vendor Advisory
• http://svn.ruby-lang.org/repos/ruby/tags/v1_9_1_429/ChangeLog
• http://svn.ruby-lang.org/repos/ruby/tags/v1_9_2_rc1/ChangeLog
• http://www.openwall.com/lists/oss-security/2010/07/02/1
• http://www.openwall.com/lists/oss-security/2010/07/02/10
• http://www.osvdb.org/66040
• http://www.ruby-lang.org/en/news/2010/07/02/ruby-1-9-1-p429-is-released/Patch, Vendor Advisory
• http://www.securityfocus.com/bid/41321
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60135
• http://osdir.com/ml/ruby-talk/2010-07/msg00095.html
• http://secunia.com/advisories/40442Vendor Advisory
• http://svn.ruby-lang.org/repos/ruby/tags/v1_9_1_429/ChangeLog
• http://svn.ruby-lang.org/repos/ruby/tags/v1_9_2_rc1/ChangeLog
• http://www.openwall.com/lists/oss-security/2010/07/02/1
• http://www.openwall.com/lists/oss-security/2010/07/02/10
• http://www.osvdb.org/66040
• http://www.ruby-lang.org/en/news/2010/07/02/ruby-1-9-1-p429-is-released/Patch, Vendor Advisory
• http://www.securityfocus.com/bid/41321
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60135

Published

Jul 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2483The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote…
• CVE-2010-2484The strrchr function in PHP 5.2 before 5.2.14 allows context…
• CVE-2010-2485Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-2486Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-2487Multiple cross-site scripting (XSS) vulnerabilities in MoinM…
• CVE-2010-2488NULL pointer dereference vulnerability in ZNC before 0.092 c…7.5
• CVE-2010-2490Mumble: murmur-server has DoS due to malformed client query6.5
• CVE-2010-2491Cross-site scripting (XSS) vulnerability in cgi/client.py in…
• CVE-2010-2492Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptf…7.8
• CVE-2010-2493The default configuration of the deployment descriptor (aka …
• CVE-2010-2494Multiple buffer underflows in the base64 decoder in base64.c…
• CVE-2010-2495The pppol2tp_xmit function in drivers/net/pppol2tp.c in the …