CVE-2007-5497 Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.
MediumCVSS 5.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ext2 filesystems utilities e2fsprogs | <= 1.40.2 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.02 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.03 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.04 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.05 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.06 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.07 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.08 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.09 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.10 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.11 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.12 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.13 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.14 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.15 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.16 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.17 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.18 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.19 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.20 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.21 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.22 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.23 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.24 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.25 | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ext2 filesystems utilities e2fsprogs | = 1.26 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.27 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.28 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.29 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.30 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.31 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.32 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.33 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.34 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.35 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.36 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.37 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.38 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.39 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.40 | No fix listed |
| ext2 filesystems utilities e2fsprogs | = 1.40.1 | No fix listed |
| debian/e2fsprogs(Debian:12) | < 1.40.3-1 | 1.40.3-1 |
| debian/e2fsprogs(Debian:13) | < 1.40.3-1 | 1.40.3-1 |
| debian/e2fsprogs(Debian:14) | < 1.40.3-1 | 1.40.3-1 |
References
- SSRT100018 vendor-advisory
- [Security-announce] 20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package mailing-list
- 27889 third-party-advisory vendor-advisory
- 27965 third-party-advisory vendor-advisory
- 27987 third-party-advisory vendor-advisory
- 28000 third-party-advisory vendor-advisory
- 28030 third-party-advisory vendor-advisory
- 28042 third-party-advisory vendor-advisory
- 28360 third-party-advisory vendor-advisory
- 28541 third-party-advisory vendor-advisory
- 28648 third-party-advisory vendor-advisory
- 29224 third-party-advisory vendor-advisory
- 32774 third-party-advisory
- 40551 third-party-advisory vendor-advisory
- sourceforge.net
- support.avaya.com
- support.citrix.com
- wiki.rpath.com
- DSA-1422 vendor-advisory
- MDKSA-2007:242 vendor-advisory
- SUSE-SR:2007:025 vendor-advisory
- RHSA-2008:0003 vendor-advisory
- 20080212 FLEA-2008-0005-1 e2fsprogs mailing-list
- 20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package mailing-list
- 26772 vdb-entry
- 1019537 vdb-entry
- USN-555-1 vendor-advisory
- www.vmware.com
- ADV-2007-4135 vdb-entry vendor-advisory
- ADV-2008-0761 vdb-entry vendor-advisory
- ADV-2010-1796 vdb-entry vendor-advisory
- e2fsprogs-libext2fs-integer-overflow(38903) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10399 signature vdb-entry
- FEDORA-2007-4447 vendor-advisory
- FEDORA-2007-4461 vendor-advisory
- Debian Security Tracker CVE-2007-5497 vendor-advisory
- bugs.debian.org issue-tracking