NVD

Id
55659  
Name
CVE-2007-3508  
Description
** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-03  
Modified Date
2012-11-05  
Seq
2007-3508  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283071 55659 CVE-2007-3508 http://bugs.gentoo.org/show_bug.cgi?id=183844  View
283072 55659 CVE-2007-3508 GLSA-200707-04  View
283073 55659 CVE-2007-3508 http://sources.gentoo.org/viewcvs.py/gentoo/src/patchsets/glibc/2.5/1600_all_glibc-hwcap-mask-secure.patch?rev=1.1&view=markup  View
283074 55659 CVE-2007-3508 24758  View
283075 55659 CVE-2007-3508 1018334  View
283076 55659 CVE-2007-3508 [libc-hacker] [PATCH] Fix LD_HWCAP_MASK handling  View
283077 55659 CVE-2007-3508 ADV-2007-2418  View
283078 55659 CVE-2007-3508 glibc-envvars-overflow(35240)  View

Related JVN