CVE-2007-3508 in C Library

सारांश

द्वारा MITRE

** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 02/07/2007
• प्रकटीकरण: 03/07/2007
• संयम: स्वीकृत
• प्रविष्टि: VDB-37624
• CPE: तैयार
• CWE: CWE-189 (पुष्टि की गई)
• CVSS: 7.2 (NVD)
• EPSS: 0.00454
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Industry, Chemical, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3508
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3508
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3508/