CVE-2007-5497

Опубликовано: 07 дек. 2007

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

Ссылки

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083
http://lists.vmware.com/pipermail/security-announce/2008/000007.html
http://secunia.com/advisories/27889
Vendor Advisory
http://secunia.com/advisories/27965
Vendor Advisory
http://secunia.com/advisories/27987
Vendor Advisory
http://secunia.com/advisories/28000
Vendor Advisory
http://secunia.com/advisories/28030
Vendor Advisory
http://secunia.com/advisories/28042
Vendor Advisory
http://secunia.com/advisories/28360
Vendor Advisory
http://secunia.com/advisories/28541
Vendor Advisory
http://secunia.com/advisories/28648
Vendor Advisory
http://secunia.com/advisories/29224
Vendor Advisory
http://secunia.com/advisories/32774
http://secunia.com/advisories/40551
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=560230&group_id=2406
http://support.avaya.com/elmodocs2/security/ASA-2008-040.htm
http://support.citrix.com/article/CTX118766
http://wiki.rpath.com/Advisories:rPSA-2007-0262
http://www.debian.org/security/2007/dsa-1422

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:*:*:*:*:*:*:*:*

Версия до 1.40.2 (включая)

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.02:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.03:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.04:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.05:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.06:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.07:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.08:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.09:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.10:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.11:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.12:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.13:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.14:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.15:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.16:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.17:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.18:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.19:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.20:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.21:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.22:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.23:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.24:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.25:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.26:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.27:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.28:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.29:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.30:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.31:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.32:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.33:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.34:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.35:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.36:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.37:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.38:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.39:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.40:*:*:*:*:*:*:*

cpe:2.3:a:ext2_filesystems_utilities:e2fsprogs:1.40.1:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07704

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2007-5497

ubuntu

больше 17 лет назад

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

CVE-2007-5497

redhat

больше 17 лет назад

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

CVE-2007-5497

debian

больше 17 лет назад

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 all ...

GHSA-r9pv-wqv4-69wf

github

около 3 лет назад

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

ELSA-2008-0003

oracle-oval

больше 17 лет назад

ELSA-2008-0003: Moderate: e2fsprogs security update (MODERATE)

EPSS

Процентиль: 91%

0.07704

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-189