Some vulnerabilities have been reported in Apache Portable Runtime, which can potentially be exploited by malicious people to cause a DoS (Denial of Service) or compromise an application using the library.

The vulnerabilities are caused due to integer overflow errors in memory/unix/apr_pools.c when aligning relocatable memory blocks, which can potentially be exploited to cause buffer overflows.

This is related to:
SA36138

Solution
-- Apache Portable Runtime 1.x --
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Matt Lewis.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://svn.apache.org/viewvc/apr/apr/branches/0.9.x/CHANGES?revision=800733&view=markup
http://svn.apache.org/viewvc/apr/apr/branches/1.3.x/CHANGES?revision=800732&view=markup

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers