PT-2008-1115 · Gnu · Libcdio
Publicado
2008-01-03
·
Atualizado
2017-08-08
·
CVE-2007-6613
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
libcdio versions 0.79 and earlier
libcdio versions prior to 0.78.2-r4
Description
The issue is related to a stack-based buffer overflow in the print iso9660 recurse function, which can be triggered by a disk or image containing a long joilet file name. This could lead to a denial of service or potentially allow the execution of arbitrary code. The vulnerability can be exploited remotely.
Recommendations
For libcdio versions 0.79 and earlier, update to a version later than 0.79 to resolve the issue.
For libcdio versions prior to 0.78.2-r4, update to version 0.78.2-r4 or later to fix the vulnerability.
As a temporary workaround, consider restricting access to disks or images that may contain long joilet file names to minimize the risk of exploitation.
Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Libcdio