CVE-2007-1536
Fixed in a distro release EPSS 14%
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
Products: file
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | file | 4.20-1 |
| Debian 13 | file | 4.20-1 |
| Debian 14 | file | 4.20-1 |
| Debian 3.1 | file | 4.12-1sarge1 |
| Debian 4.0 | file | 4.17-5etch1 |
| Red Hat Enterprise Linux 4 | file | 0:4.10-3.EL4.5 |
| Red Hat Enterprise Linux 4 | file-debuginfo | 0:4.10-3.EL4.5 |
| Red Hat Enterprise Linux 5 | file | 0:4.17-9.el5 |
| Red Hat Enterprise Linux 5 | file-debuginfo | 0:4.17-9.el5 |
| openSUSE Tumbleweed | file | 5.40-1.14 |