CVE ID:	CVE-2007-5497
Description:	Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.
Test IDs:	1.3.6.1.4.1.25623.1.0.59986   1.3.6.1.4.1.25623.1.0.60192   1.3.6.1.4.1.25623.1.0.62226   1.3.6.1.4.1.25623.1.0.65097   1.3.6.1.4.1.25623.1.0.60681   1.3.6.1.4.1.25623.1.0.59975   1.3.6.1.4.1.25623.1.0.62229   1.3.6.1.4.1.25623.1.0.60048   1.3.6.1.4.1.25623.1.0.60191   1.3.6.1.4.1.25623.1.0.59957   1.3.6.1.4.1.25623.1.0.65025   1.3.6.1.4.1.25623.1.0.60091
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5497 Bugtraq: 20080212 FLEA-2008-0005-1 e2fsprogs (Google Search) http://www.securityfocus.com/archive/1/archive/1/487999/100/0/threaded Bugtraq: 20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package (Google Search) http://www.securityfocus.com/archive/1/archive/1/489082/100/0/threaded http://lists.vmware.com/pipermail/security-announce/2008/000007.html Debian Security Information: DSA-1422 (Google Search) http://www.debian.org/security/2007/dsa-1422 https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00618.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00629.html HPdes Security Advisory: HPSBMA02554 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 HPdes Security Advisory: SSRT100018 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083 http://www.mandriva.com/security/advisories?name=MDKSA-2007:242 RedHat Security Advisories: RHSA-2008:0003 http://www.redhat.com/support/errata/RHSA-2008-0003.html SuSE Security Announcement: SUSE-SR:2007:025 (Google Search) http://www.novell.com/linux/security/advisories/2007_25_sr.html http://www.ubuntu.com/usn/usn-555-1 BugTraq ID: 26772 http://www.securityfocus.com/bid/26772 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10399 http://secunia.com/advisories/40551 http://secunia.com/advisories/32774 http://www.vupen.com/english/advisories/2007/4135 http://www.vupen.com/english/advisories/2008/0761 http://www.securitytracker.com/id?1019537 http://secunia.com/advisories/27889 http://secunia.com/advisories/27987 http://secunia.com/advisories/28000 http://secunia.com/advisories/28042 http://secunia.com/advisories/28030 http://secunia.com/advisories/27965 http://secunia.com/advisories/28360 http://secunia.com/advisories/28541 http://secunia.com/advisories/28648 http://secunia.com/advisories/29224 http://www.vupen.com/english/advisories/2010/1796 XForce ISS Database: e2fsprogs-libext2fs-integer-overflow(38903) http://xforce.iss.net/xforce/xfdb/38903

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: