Patchwire CVEs, their patch status, and feeds to follow them

CVE-2003-0102

Fixed in a distro release EPSS 2%

Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).

Published 2004-09-01 · CVE record · OSV

Products: file, netbsd

Distro releases

ReleasePackageFixed in
Debian 12file3.40-1.1
Debian 13file3.40-1.1
Debian 14file3.40-1.1
Debian 3.0file3.37-3.1.woody.1