CVE-2007-2799
CVE-2007-2799
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
EPSS 2.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.debian.org/security/2007/dsa-1343
- http://secunia.com/advisories/29179
- http://www.trustix.org/errata/2007/0024/
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022
- http://secunia.com/advisories/26415
- http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm
- http://www.vupen.com/english/advisories/2008/0924/references
- http://www.securitytracker.com/id?1018140
- http://www.novell.com/linux/security/advisories/2007_40_file.html
- https://issues.rpath.com/browse/RPL-1311
- http://secunia.com/advisories/25931
- http://www.amavis.org/security/asa-2007-3.txt
- http://secunia.com/advisories/25544
- http://secunia.com/advisories/29420
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:114
- http://www.redhat.com/support/errata/RHSA-2007-0391.html
- http://secunia.com/advisories/25578
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://www.securityfocus.com/archive/1/469520/30/6420/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34731
- http://www.vupen.com/english/advisories/2007/2071
- http://secunia.com/advisories/25394
- http://docs.info.apple.com/article.html?artnum=307562
- https://nvd.nist.gov/vuln/detail/CVE-2007-2799