CVE ID:	CVE-2011-0188
Description:	The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."
Test IDs:	1.3.6.1.4.1.25623.1.0.122037   1.3.6.1.4.1.25623.1.1.1.2.2015.235   1.3.6.1.4.1.25623.1.0.69799   1.3.6.1.4.1.25623.1.0.880953   1.3.6.1.4.1.25623.1.0.122141   1.3.6.1.4.1.25623.1.0.870450   1.3.6.1.4.1.25623.1.0.881337   1.3.6.1.4.1.25623.1.0.69798   1.3.6.1.4.1.25623.1.0.880549   1.3.6.1.4.1.25623.1.0.69800   1.3.6.1.4.1.25623.1.0.881272   1.3.6.1.4.1.25623.1.0.870449   1.3.6.1.4.1.25623.1.1.1.2.2014.88   1.3.6.1.4.1.25623.1.0.122142   1.3.6.1.4.1.25623.1.0.870672
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0188 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:097 http://www.mandriva.com/security/advisories?name=MDVSA-2011:098 RedHat Security Advisories: RHSA-2011:0908 http://www.redhat.com/support/errata/RHSA-2011-0908.html RedHat Security Advisories: RHSA-2011:0909 http://www.redhat.com/support/errata/RHSA-2011-0909.html RedHat Security Advisories: RHSA-2011:0910 http://www.redhat.com/support/errata/RHSA-2011-0910.html http://www.securitytracker.com/id?1025236