{"id":"DEBIAN-CVE-2009-0585","details":"Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.","modified":"2026-10-31T16:00:03.254603031Z","published":"2009-03-14T18:30:00.483Z","upstream":["CVE-2009-0585"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2009-0585"}],"affected":[{"package":{"name":"libsoup","ecosystem":"Debian:14","purl":"pkg:deb/debian/libsoup?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.105-4"}]}],"versions":["2.1.2-1","2.1.5-1","2.1.7-1","2.2.100-1","2.2.101-1","2.2.102-1","2.2.103-1","2.2.104-1","2.2.105-1","2.2.105-2","2.2.105-3","2.2.2-1","2.2.3-1","2.2.3-2","2.2.3-2sarge1","2.2.6-1","2.2.7-1","2.2.7-2","2.2.91-1","2.2.91-2","2.2.92-1","2.2.93-1","2.2.93-2","2.2.93-3","2.2.95.1-1","2.2.96-1","2.2.97-1","2.2.98-1","2.2.98-2","2.2.98-2+etch1","2.2.99-1"],"ecosystem_specific":{"urgency":"medium"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2009-0585.json"}}],"schema_version":"1.9.2"}