CVE-2007-5497

Published: Dec 7, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.

Affected (41)

Products: Ext2 Filesystems Utilities: E2fsprogs

Ext2 Filesystems Utilities

1 product

E2fsprogs

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Ext2 Filesystems Utilities E2fsprogs	version ≤ 1.40.2
Ext2 Filesystems Utilities E2fsprogs	Version 1.02
Ext2 Filesystems Utilities E2fsprogs	Version 1.03
Ext2 Filesystems Utilities E2fsprogs	Version 1.04
Ext2 Filesystems Utilities E2fsprogs	Version 1.05
Ext2 Filesystems Utilities E2fsprogs	Version 1.06
Ext2 Filesystems Utilities E2fsprogs	Version 1.07
Ext2 Filesystems Utilities E2fsprogs	Version 1.08
Ext2 Filesystems Utilities E2fsprogs	Version 1.09
Ext2 Filesystems Utilities E2fsprogs	Version 1.10
Ext2 Filesystems Utilities E2fsprogs	Version 1.11
Ext2 Filesystems Utilities E2fsprogs	Version 1.12
Ext2 Filesystems Utilities E2fsprogs	Version 1.13
Ext2 Filesystems Utilities E2fsprogs	Version 1.14
Ext2 Filesystems Utilities E2fsprogs	Version 1.15
Ext2 Filesystems Utilities E2fsprogs	Version 1.16
Ext2 Filesystems Utilities E2fsprogs	Version 1.17
Ext2 Filesystems Utilities E2fsprogs	Version 1.18
Ext2 Filesystems Utilities E2fsprogs	Version 1.19
Ext2 Filesystems Utilities E2fsprogs	Version 1.20
Ext2 Filesystems Utilities E2fsprogs	Version 1.21
Ext2 Filesystems Utilities E2fsprogs	Version 1.22
Ext2 Filesystems Utilities E2fsprogs	Version 1.23
Ext2 Filesystems Utilities E2fsprogs	Version 1.24
Ext2 Filesystems Utilities E2fsprogs	Version 1.25
Ext2 Filesystems Utilities E2fsprogs	Version 1.26
Ext2 Filesystems Utilities E2fsprogs	Version 1.27
Ext2 Filesystems Utilities E2fsprogs	Version 1.28
Ext2 Filesystems Utilities E2fsprogs	Version 1.29
Ext2 Filesystems Utilities E2fsprogs	Version 1.30
Ext2 Filesystems Utilities E2fsprogs	Version 1.31
Ext2 Filesystems Utilities E2fsprogs	Version 1.32
Ext2 Filesystems Utilities E2fsprogs	Version 1.33
Ext2 Filesystems Utilities E2fsprogs	Version 1.34
Ext2 Filesystems Utilities E2fsprogs	Version 1.35
Ext2 Filesystems Utilities E2fsprogs	Version 1.36
Ext2 Filesystems Utilities E2fsprogs	Version 1.37
Ext2 Filesystems Utilities E2fsprogs	Version 1.38
Ext2 Filesystems Utilities E2fsprogs	Version 1.39
Ext2 Filesystems Utilities E2fsprogs	Version 1.40.1
Ext2 Filesystems Utilities E2fsprogs	Version 1.40

Related CWEs

CWE-189

References (72)

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2008/000007.html

Source: secalert@redhat.com

http://secunia.com/advisories/27889

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27965

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27987

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28000

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28030

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28042

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28360

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28541

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28648

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29224

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/32774

Source: secalert@redhat.com

http://secunia.com/advisories/40551

Source: secalert@redhat.com

Vendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=560230&group_id=2406

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2008-040.htm

Source: secalert@redhat.com

http://support.citrix.com/article/CTX118766

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2007-0262

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1422

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:242

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_25_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0003.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/487999/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/489082/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26772

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019537

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-555-1

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2008-0004.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4135

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2008/0761

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2010/1796

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/38903

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2011

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10399

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00618.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00629.html

Source: secalert@redhat.com

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083