CVE-2007-1536
NoneCVSS
—
EPSS
13.6%
Published
Mar 20, 2007
CISA due date
—
The record
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | file | 0 | 4.20-1 |
| Debian:11 | file | 0 | 4.20-1 |
| Debian:12 | file | 0 | 4.20-1 |
| Debian:13 | file | 0 | 4.20-1 |
| Debian:3.1 | file | 0 | 4.12-1sarge1 |
| Debian:4.0 | file | 0 | 4.17-5etch1 |
| Red Hat:enterprise_linux:4::as | file | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::as | file-debuginfo | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::desktop | file | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::desktop | file-debuginfo | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::es | file | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::es | file-debuginfo | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::ws | file | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:4::ws | file-debuginfo | 0 | 0:4.10-3.EL4.5 |
| Red Hat:enterprise_linux:5::client | file | 0 | 0:4.17-9.el5 |
| Red Hat:enterprise_linux:5::client | file-debuginfo | 0 | 0:4.17-9.el5 |
| Red Hat:enterprise_linux:5::server | file | 0 | 0:4.17-9.el5 |
| Red Hat:enterprise_linux:5::server | file-debuginfo | 0 | 0:4.17-9.el5 |
| openSUSE:Tumbleweed | file | 0 | 5.40-1.14 |
Related vulnerabilities
- CVE-2014-8117 softmagic.c in file before 5.21 does not properly limit recursion, which allows remote… Also affects file
- CVE-2015-8865 The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo… Also affects file
- CVE-2014-9620 The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of… Also affects file
- CVE-2014-3710 The donote function in readelf.c in file through 5.20, as used in the Fileinfo component… Also affects file
- CVE-2014-3587 Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as… Also affects file
- CVE-2014-3480 The cdf_count_chain function in cdf.c in file before 5.19, as used in the Fileinfo… Also affects file
- CVE-2014-3478 Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in… Also affects file
- CVE-2014-3487 The cdf_read_property_info function in file before 5.19, as used in the Fileinfo… Also affects file