CVE-2007-6613 Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attacke...
MediumCVSS 5.0
EPSS 12.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU libcdio | <= 0.79 | No fix listed |
| debian/libcdio(Debian:12) | < 0.78.2+dfsg1-2 | 0.78.2+dfsg1-2 |
| debian/libcdio(Debian:13) | < 0.78.2+dfsg1-2 | 0.78.2+dfsg1-2 |
| debian/libcdio(Debian:14) | < 0.78.2+dfsg1-2 | 0.78.2+dfsg1-2 |
References
- Debian Security Tracker CVE-2007-6613 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.gentoo.org exploit patch
- [libcdio-devel] 20071231 buffer overrun in cd-info and iso-info and a release? mailing-list
- SUSE-SR:2008:005 vendor-advisory
- 28308 third-party-advisory
- 28569 third-party-advisory
- 28796 third-party-advisory
- 28970 third-party-advisory
- 29242 third-party-advisory
- GLSA-200801-08 vendor-advisory
- MDVSA-2008:037 vendor-advisory
- 27131 vdb-entry
- USN-580-1 vendor-advisory
- ADV-2008-0030 vdb-entry
- bugzilla.redhat.com exploit
- libcdio-printiso9660recurse-bo(39405) vdb-entry