CVE-2007-0235 Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a...
LowCVSS 3.7
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libgtop | <= 2.14.5 | No fix listed |
| debian/libgtop2(Debian:12) | < 2.14.4-3 | 2.14.4-3 |
| debian/libgtop2(Debian:13) | < 2.14.4-3 | 2.14.4-3 |
| debian/libgtop2(Debian:14) | < 2.14.4-3 | 2.14.4-3 |
References
- Debian Security Tracker CVE-2007-0235 vendor-advisory
- bugs.debian.org issue-tracking
- bugzilla.gnome.org
- ftp.gnome.org
- 32815 vdb-entry
- 23736 third-party-advisory vendor-advisory
- 23777 third-party-advisory vendor-advisory
- 23814 third-party-advisory vendor-advisory
- 23840 third-party-advisory vendor-advisory
- 23872 third-party-advisory vendor-advisory
- 24015 third-party-advisory vendor-advisory
- 26367 third-party-advisory
- GLSA-200701-17 vendor-advisory
- DSA-1255 vendor-advisory
- MDKSA-2007:023 vendor-advisory
- RHSA-2007:0765 vendor-advisory
- 22054 vdb-entry
- 1018526 vdb-entry
- USN-407-1 vendor-advisory
- ADV-2007-0185 vdb-entry
- ADV-2007-0187 vdb-entry
- libgtop2-glibtopbo(31522) vdb-entry
- issues.rpath.com
- launchpad.net
- oval:org.mitre.oval:def:10720 signature vdb-entry