Re: Integer underflow in the "file" program before 4.20

Simon L. Nielsen wrote: > Thomas Vogt wrote: > > > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536 > > "Integer underflow in the file_printf function in the "file" program > > before 4.20 allows user-assisted attackers to execute arbitrary code via > > a file that triggers a heap

Re: Integer underflow in the "file" program before 4.20

Simon L. Nielsen schrieb: On 2007.03.29 16:22:58 +0200, Thomas Vogt wrote: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536 "Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that tri

Re: Integer underflow in the "file" program before 4.20

On 2007.03.29 16:22:58 +0200, Thomas Vogt wrote: > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536 > "Integer underflow in the file_printf function in the "file" program > before 4.20 allows user-assisted attackers to execute arbitrary code via > a file that triggers a heap-based buffe

Integer underflow in the "file" program before 4.20

Hello http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536 "Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow." Is FreeBSD 5.x/6.x affected too? It l