CVE-2007-2799
- State
- Published
- Severity
- Not scored
- Published
- May 23, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 22, 2007
Description
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- DSA-1343vendor-advisory
- 29179third-party-advisory
- 2007-0024vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022
- 26415third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm
- ADV-2008-0924vdb-entry
- 1018140vdb-entry
- SUSE-SA:2007:040vendor-advisory
- https://issues.rpath.com/browse/RPL-1311
- 25931third-party-advisory
- http://www.amavis.org/security/asa-2007-3.txt
- 25544third-party-advisory
- 29420third-party-advisory
- MDKSA-2007:114vendor-advisory
- RHSA-2007:0391vendor-advisory
- 25578third-party-advisory
- APPLE-SA-2008-03-18vendor-advisory
- 20070524 FLEA-2007-0022-1: filemailing-list
- file-assert-code-execution(34731)vdb-entry
- ADV-2007-2071vdb-entry
- 25394third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- 26294third-party-advisory
- 26203third-party-advisory
- GLSA-200705-25vendor-advisory
- oval:org.mitre.oval:def:11012vdb-entrysignature
- 24146vdb-entry
- 38498vdb-entry
- USN-439-2vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.