CVE-2007-2799
Fixed in a distro release EPSS 3%
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
Products: file, the_sleuth_kith
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | file | 4.21-1 |
| Debian 13 | file | 4.21-1 |
| Debian 14 | file | 4.21-1 |
| Debian 3.1 | file | 4.12-1sarge2 |
| Debian 4.0 | file | 4.17-5etch2 |
| Debian 4.0 | file | 4.17-5etch3 |
| Red Hat Enterprise Linux 4 | file | 0:4.10-3.0.2.el4 |
| Red Hat Enterprise Linux 4 | file-debuginfo | 0:4.10-3.0.2.el4 |
| Red Hat Enterprise Linux 5 | file | 0:4.17-9.0.1.el5 |
| Red Hat Enterprise Linux 5 | file-debuginfo | 0:4.17-9.0.1.el5 |
| openSUSE Tumbleweed | file | 5.40-1.14 |