FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-5497

This CVE name corresponds to:

Entered	Topic
2007-12-20	e2fsprogs -- heap buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-5497 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-5497
Phase	Assigned(20071017)

Description

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

References

Source	Reference
BUGTRAQ	20080212 FLEA-2008-0005-1 e2fsprogs
BUGTRAQ	20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package
MLIST	[Security-announce] 20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package
CONFIRM	http://sourceforge.net/project/shownotes.php?release_id=560230&group_id=2406
CONFIRM	https://issues.rpath.com/browse/RPL-2011
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2008-040.htm
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2007-0262
CONFIRM	http://www.vmware.com/security/advisories/VMSA-2008-0004.html
CONFIRM	http://support.citrix.com/article/CTX118766
DEBIAN	DSA-1422
FEDORA	FEDORA-2007-4447
FEDORA	FEDORA-2007-4461
HP	HPSBMA02554
HP	SSRT100018
MANDRIVA	MDKSA-2007:242
REDHAT	RHSA-2008:0003
SUSE	SUSE-SR:2007:025
UBUNTU	USN-555-1
BID	26772
OVAL	oval:org.mitre.oval:def:10399
SECUNIA	40551
SECUNIA	32774
VUPEN	ADV-2007-4135
VUPEN	ADV-2008-0761
SECTRACK	1019537
SECUNIA	27889
SECUNIA	27987
SECUNIA	28000
SECUNIA	28042
SECUNIA	28030
SECUNIA	27965
SECUNIA	28360
SECUNIA	28541
SECUNIA	28648
SECUNIA	29224
VUPEN	ADV-2010-1796
XF	e2fsprogs-libext2fs-integer-overflow(38903)