CVE - CVE-2007-2799

CVE-ID
CVE-2007-2799	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20070524 FLEA-2007-0022-1: file URL:http://www.securityfocus.com/archive/1/469520/30/6420/threaded CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022 CONFIRM:https://issues.rpath.com/browse/RPL-1311 CONFIRM:http://www.amavis.org/security/asa-2007-3.txt CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm CONFIRM:http://docs.info.apple.com/article.html?artnum=307562 APPLE:APPLE-SA-2008-03-18 URL:http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html DEBIAN:DSA-1343 URL:http://www.debian.org/security/2007/dsa-1343 GENTOO:GLSA-200705-25 URL:http://www.gentoo.org/security/en/glsa/glsa-200705-25.xml MANDRIVA:MDKSA-2007:114 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:114 NETBSD:NetBSD-SA2008-001 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc REDHAT:RHSA-2007:0391 URL:http://www.redhat.com/support/errata/RHSA-2007-0391.html SUSE:SUSE-SA:2007:040 URL:http://www.novell.com/linux/security/advisories/2007_40_file.html TRUSTIX:2007-0024 URL:http://www.trustix.org/errata/2007/0024/ UBUNTU:USN-439-2 URL:http://www.ubuntu.com/usn/usn-439-2 BID:24146 URL:http://www.securityfocus.com/bid/24146 OSVDB:38498 URL:http://osvdb.org/38498 OVAL:oval:org.mitre.oval:def:11012 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11012 VUPEN:ADV-2007-2071 URL:http://www.vupen.com/english/advisories/2007/2071 VUPEN:ADV-2008-0924 URL:http://www.vupen.com/english/advisories/2008/0924/references SECTRACK:1018140 URL:http://www.securitytracker.com/id?1018140 SECUNIA:25394 URL:http://secunia.com/advisories/25394 SECUNIA:25544 URL:http://secunia.com/advisories/25544 SECUNIA:25578 URL:http://secunia.com/advisories/25578 SECUNIA:25931 URL:http://secunia.com/advisories/25931 SECUNIA:26203 URL:http://secunia.com/advisories/26203 SECUNIA:26294 URL:http://secunia.com/advisories/26294 SECUNIA:26415 URL:http://secunia.com/advisories/26415 SECUNIA:29179 URL:http://secunia.com/advisories/29179 SECUNIA:29420 URL:http://secunia.com/advisories/29420 XF:file-assert-code-execution(34731) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/34731
Assigning CNA
N/A
Date Entry Created
20070522	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070522)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.