NVD

Id
54962  
Name
CVE-2007-2799  
Description
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-23  
Modified Date
2012-10-30  
Seq
2007-2799  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279050 54962 CVE-2007-2799 NetBSD-SA2008-001  View
279051 54962 CVE-2007-2799 http://docs.info.apple.com/article.html?artnum=307562  View
279052 54962 CVE-2007-2799 APPLE-SA-2008-03-18  View
279053 54962 CVE-2007-2799 oval:org.mitre.oval:def:11012  View
279054 54962 CVE-2007-2799 http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm  View
279055 54962 CVE-2007-2799 http://www.amavis.org/security/asa-2007-3.txt  View
279056 54962 CVE-2007-2799 DSA-1343  View
279057 54962 CVE-2007-2799 GLSA-200705-25  View
279058 54962 CVE-2007-2799 MDKSA-2007:114  View
279059 54962 CVE-2007-2799 SUSE-SA:2007:040  View
279060 54962 CVE-2007-2799 RHSA-2007:0391  View
279061 54962 CVE-2007-2799 20070524 FLEA-2007-0022-1: file  View
279062 54962 CVE-2007-2799 24146  View
279063 54962 CVE-2007-2799 1018140  View
279064 54962 CVE-2007-2799 2007-0024  View
279065 54962 CVE-2007-2799 USN-439-2  View
279066 54962 CVE-2007-2799 ADV-2007-2071  View
279067 54962 CVE-2007-2799 ADV-2008-0924  View
279068 54962 CVE-2007-2799 file-assert-code-execution(34731)  View
279069 54962 CVE-2007-2799 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022  View
279070 54962 CVE-2007-2799 https://issues.rpath.com/browse/RPL-1311  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51747 JVNDB-2007-000410 file プログラムにおける整数オーバーフローの脆弱性 file プログラムには、過剰に大きいサイズのファイルを扱う場合 assert() 関数を迂回し、整数オーバーフローの攻撃を受ける脆弱性が存在します。なお、本脆弱性は JVNDB-2007-000235 (CVE-2007-1536) を修正するパッチに起因します。 CVE-2007-2799 26154 CVE-2007-2799 54962 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000410.html 2007-05-23 2008-03-31 View