CVE-2007-1536 Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
HighCVSS 9.3
EPSS 13.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| file | <= 4.19 | No fix listed |
| debian/file(Debian:12) | < 4.20-1 | 4.20-1 |
| debian/file(Debian:13) | < 4.20-1 | 4.20-1 |
| debian/file(Debian:14) | < 4.20-1 | 4.20-1 |
References
- Debian Security Tracker CVE-2007-1536 vendor-advisory
- bugs.debian.org issue-tracking
- docs.info.apple.com
- APPLE-SA-2007-05-24 vendor-advisory
- [file] 20070302 file-4.20 is now available mailing-list patch
- [4.0] 20070709 015: SECURITY FIX: July 9, 2007 vendor-advisory
- 24548 patch third-party-advisory vendor-advisory
- 24592 third-party-advisory vendor-advisory
- 24604 third-party-advisory vendor-advisory
- 24608 third-party-advisory vendor-advisory
- 24616 third-party-advisory vendor-advisory
- 24617 third-party-advisory vendor-advisory
- 24723 third-party-advisory vendor-advisory
- 24754 third-party-advisory vendor-advisory
- 25133 third-party-advisory vendor-advisory
- 25393 third-party-advisory vendor-advisory
- 25402 third-party-advisory vendor-advisory
- 25931 third-party-advisory vendor-advisory
- 25989 third-party-advisory vendor-advisory
- 27307 third-party-advisory vendor-advisory
- 27314 third-party-advisory vendor-advisory
- 29179 third-party-advisory vendor-advisory
- FreeBSD-SA-07:04 vendor-advisory
- GLSA-200703-26 vendor-advisory
- GLSA-200710-19 vendor-advisory
- SSA:2007-093-01 vendor-advisory
- support.avaya.com
- DSA-1274 vendor-advisory
- VU#606700 third-party-advisory us-government-resource
- MDKSA-2007:067 vendor-advisory
- SUSE-SA:2007:040 vendor-advisory
- SUSE-SR:2007:005 vendor-advisory
- RHSA-2007:0124 vendor-advisory
- 20070825 OpenBSD 4.1 - Heap overflow vulnerabillity mailing-list
- 20070828 Re: OpenBSD 4.1 - Heap overflow vulnerabillity mailing-list
- 23021 vdb-entry
- 1017796 vdb-entry
- USN-439-1 vendor-advisory
- ADV-2007-1040 vdb-entry vendor-advisory
- ADV-2007-1939 vdb-entry vendor-advisory
- bugs.gentoo.org
- openbsd-file-bo(36283) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10658 signature vdb-entry