Vulnerability in File
CVE-2007-2799
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
EPSS: 0.027 (84.4th percentile) — read the EPSS interpretation.
Affected products
- File — versions 4.2
- Sleuth_kit The_sleuth_kith
- N/a — versions n/a
Weakness classification (CWE)
References
- secteam@freebsd.org (vendor-advisory, x_refsource_DEBIAN)
- secteam@freebsd.org (x_refsource_SECUNIA, third-party-advisory)
- secteam@freebsd.org (vendor-advisory, x_refsource_TRUSTIX)
- secteam@freebsd.org (x_refsource_CONFIRM, Vendor Advisory)
- secteam@freebsd.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secteam@freebsd.org (x_refsource_CONFIRM)
- secteam@freebsd.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secteam@freebsd.org (vdb-entry, x_refsource_SECTRACK)
- secteam@freebsd.org (vendor-advisory, x_refsource_SUSE)
- secteam@freebsd.org (x_refsource_CONFIRM)