CVE:CVE-2010-1676
CNNVD:CNNVD-201012-262
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。
Tor 0.2.1.28之前版本以及0.2.2.20-alpha之前的0.2.2.x版本中存在基于堆的缓冲区溢出漏洞。远程攻击者可以借助未明向量导致拒绝服务(守护进程崩溃)或者可能执行任意代码。
solution:Upgrade tor tor to a higher version than 0.2.1.1.27,0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.1,0.1.0.2,0.1.0.3,0.1.0.4,0.1.0.5,0.1.0.6,0.1.0.7,0.1.0.8,0.1.0.9,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.0.18,0.1.0.19,0.1.1,0.1.1.1,0.1.1.1_alpha,0.1.1.2,0.1.1.2_alpha,0.1.1.3,0.1.1.3_alpha,0.1.1.4,0.1.1.4_alpha,0.1.1.5,0.1.1.5_alpha,0.1.1.6,0.1.1.6_alpha,0.1.1.7,0.1.1.7_alpha,0.1.1.8,0.1.1.8_alpha,0.1.1.9,0.1.1.9_alpha,0.1.1.10,0.1.1.10_alpha,0.1.1.11,0.1.1.12,0.1.1.13,0.1.1.14,0.1.1.15,0.1.1.16,0.1.1.17,0.1.1.18,0.1.1.19,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.25,0.1.1.26,0.1.2.1_alpha-cvs,0.1.2.2,0.1.2.4,0.1.2.5,0.1.2.5:alpha,0.1.2.7:alpha,0.1.2.9,0.1.2.10,0.1.2.11,0.1.2.12,0.1.2.13,0.1.2.14,0.1.2.16,0.1.2.18,0.1.2.19,0.1.2.30,0.2.1.1.12,0.2.1.1.13,0.2.1.1.14,0.2.1.1.15,0.2.1.1.16,0.2.1.1.17,0.2.1.1.18,0.2.1.1.19,0.2.1.1.20,0.2.1.1.21,0.2.1.1.22,0.2.1.1.23,0.2.1.1.24,0.2.1.1.25,0.2.1.1.26,0.2.2.1:alpha,0.2.2.2:alpha,0.2.2.3:alpha,0.2.2.4:alpha,0.2.2.5:alpha,0.2.2.6:alpha,0.2.2.7:alpha,0.2.2.8:alpha,0.2.2.9:alpha,0.2.2.10:alpha,0.2.2.11:alpha,0.2.2.12:alpha,0.2.2.13:alpha,0.2.2.14:alpha,0.2.2.15:alpha,0.2.2.16:alpha,0.2.2.17:alpha,0.2.2.18:alpha,0.2.2.19:alpha,and avoid the version (,0.2.1.1.27],0.0.2,0.0.2_pre13,0.0.2_pre14,0.0.2_pre15,0.0.2_pre16,0.0.2_pre17,0.0.2_pre18,0.0.2_pre19,0.0.2_pre20,0.0.2_pre21,0.0.2_pre22,0.0.2_pre23,0.0.2_pre24,0.0.2_pre25,0.0.2_pre26,0.0.2_pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8,0.0.8.1,0.0.9,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.1,0.1.0.2,0.1.0.3,0.1.0.4,0.1.0.5,0.1.0.6,0.1.0.7,0.1.0.8,0.1.0.9,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.0.18,0.1.0.19,0.1.1,0.1.1.1,0.1.1.1_alpha,0.1.1.2,0.1.1.2_alpha,0.1.1.3,0.1.1.3_alpha,0.1.1.4,0.1.1.4_alpha,0.1.1.5,0.1.1.5_alpha,0.1.1.6,0.1.1.6_alpha,0.1.1.7,0.1.1.7_alpha,0.1.1.8,0.1.1.8_alpha,0.1.1.9,0.1.1.9_alpha,0.1.1.10,0.1.1.10_alpha,0.1.1.11,0.1.1.12,0.1.1.13,0.1.1.14,0.1.1.15,0.1.1.16,0.1.1.17,0.1.1.18,0.1.1.19,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.25,0.1.1.26,0.1.2.1_alpha-cvs,0.1.2.2,0.1.2.4,0.1.2.5,0.1.2.5:alpha,0.1.2.7:alpha,0.1.2.9,0.1.2.10,0.1.2.11,0.1.2.12,0.1.2.13,0.1.2.14,0.1.2.16,0.1.2.18,0.1.2.19,0.1.2.30,0.2.1.1.12,0.2.1.1.13,0.2.1.1.14,0.2.1.1.15,0.2.1.1.16,0.2.1.1.17,0.2.1.1.18,0.2.1.1.19,0.2.1.1.20,0.2.1.1.21,0.2.1.1.22,0.2.1.1.23,0.2.1.1.24,0.2.1.1.25,0.2.1.1.26,0.2.2.1:alpha,0.2.2.2:alpha,0.2.2.3:alpha,0.2.2.4:alpha,0.2.2.5:alpha,0.2.2.6:alpha,0.2.2.7:alpha,0.2.2.8:alpha,0.2.2.9:alpha,0.2.2.10:alpha,0.2.2.11:alpha,0.2.2.12:alpha,0.2.2.13:alpha,0.2.2.14:alpha,0.2.2.15:alpha,0.2.2.16:alpha,0.2.2.17:alpha,0.2.2.18:alpha,0.2.2.19:alpha