PT-2007-7509 · Mono+1 · Libmono-System-Data2.0-Cil+44

Published 1970-01-01 · Updated 2018-10-30 · CVE-2007-5197

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libmono2.0-cil versions 1.2.5.1 and earlier libmono-winforms1.0-cil (affected versions not specified) libmono-system-web2.0-cil (affected versions not specified) libmono-oracle2.0-cil (affected versions not specified) libmono-system2.0-cil (affected versions not specified) libmono-sharpzip0.6-cil (affected versions not specified) libmono-system-messaging1.0-cil (affected versions not specified) libmono-sqlite1.0-cil (affected versions not specified) libmono-system-runtime2.0-cil (affected versions not specified) libmono-relaxng1.0-cil (affected versions not specified) mono-jay (affected versions not specified) libmono-peapi1.0-cil (affected versions not specified) libmono-ldap1.0-cil (affected versions not specified) libmono-c5-1.0-cil (affected versions not specified) mono-mjs (affected versions not specified) libmono-security1.0-cil (affected versions not specified) libmono-sharpzip0.84-cil (affected versions not specified) libmono-system1.0-cil (affected versions not specified) libmono-oracle1.0-cil (affected versions not specified) libmono1.0-cil (affected versions not specified) mono-gac (affected versions not specified) libmono-sqlite2.0-cil (affected versions not specified) libmono-system-runtime1.0-cil (affected versions not specified) mono-runtime (affected versions not specified) mono-devel (affected versions not specified) libmono-system-data1.0-cil (affected versions not specified) libmono-relaxng2.0-cil (affected versions not specified) libmono-security2.0-cil (affected versions not specified) libmono-system-ldap2.0-cil (affected versions not specified) libmono-sharpzip2.6-cil (affected versions not specified) libmono-system-web1.0-cil (affected versions not specified) libmono-winforms2.0-cil (affected versions not specified) libmono-accessibility1.0-cil (affected versions not specified) libmono-bytefx0.7.6.1-cil (affected versions not specified) libmono0 (affected versions not specified) libmono-bytefx0.7.6.2-cil (affected versions not specified) libmono-system-data2.0-cil (affected versions not specified) mono-jit (affected versions not specified) libmono-sharpzip2.84-cil (affected versions not specified) mono-common (affected versions not specified) libmono-ldap2.0-cil (affected versions not specified) libmono-npgsql2.0-cil (affected versions not specified) libmono-peapi2.0-cil (affected versions not specified) mono-mcs (affected versions not specified) libmono-system-messaging2.0-cil (affected versions not specified) libmono-system-ldap1.0-cil (affected versions not specified) mono-gmcs (affected versions not specified)

Description The issue involves multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The vulnerabilities are related to buffer overflows, which allow context-dependent attackers to execute arbitrary code via unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-03509

BDU:2015-03510

BDU:2015-03511

BDU:2015-03512

BDU:2015-03513

BDU:2015-03514

BDU:2015-03515

BDU:2015-03516

BDU:2015-03517

BDU:2015-03518

BDU:2015-03519

BDU:2015-03520

BDU:2015-03521

BDU:2015-03522

BDU:2015-03523

BDU:2015-03524

BDU:2015-03525

BDU:2015-03526

BDU:2015-03527

BDU:2015-03528

BDU:2015-03529

BDU:2015-03530

BDU:2015-03531

BDU:2015-03532

BDU:2015-03533

BDU:2015-03534

BDU:2015-03535

BDU:2015-03536

BDU:2015-03537

BDU:2015-03538

BDU:2015-03539

BDU:2015-03540

BDU:2015-03541

BDU:2015-03542

BDU:2015-03543

BDU:2015-03544

BDU:2015-03545

BDU:2015-03546

BDU:2015-03547

BDU:2015-03548

BDU:2015-03549

BDU:2015-03550

BDU:2015-03551

BDU:2015-03552

BDU:2015-03553

BDU:2015-03554

BDU:2015-03555

BDU:2015-03556

BDU:2015-03557

CVE-2007-5197

DSA-1397-1

DTSA-76-1

Affected Products

Debian

Libmono-Accessibility1.0-Cil

Libmono-Bytefx0.7.6.1-Cil

Libmono-Bytefx0.7.6.2-Cil

Libmono-C5-1.0-Cil

Libmono-Ldap1.0-Cil

Libmono-Ldap2.0-Cil

Libmono-Npgsql2.0-Cil

Libmono-Oracle1.0-Cil

Libmono-Oracle2.0-Cil

Libmono-Peapi1.0-Cil

Libmono-Peapi2.0-Cil

Libmono-Relaxng1.0-Cil

Libmono-Relaxng2.0-Cil

Libmono-Security1.0-Cil

Libmono-Security2.0-Cil

Libmono-Sharpzip0.6-Cil

Libmono-Sharpzip0.84-Cil

Libmono-Sharpzip2.6-Cil

Libmono-Sharpzip2.84-Cil

Libmono-Sqlite1.0-Cil

Libmono-Sqlite2.0-Cil

Libmono-System-Data1.0-Cil

Libmono-System-Data2.0-Cil

Libmono-System-Messaging1.0-Cil

Libmono-System-Messaging2.0-Cil

Libmono-System-Runtime1.0-Cil

Libmono-System-Runtime2.0-Cil

Libmono-System-Web1.0-Cil

Libmono-System-Web2.0-Cil

Libmono-System1.0-Cil

Libmono-System2.0-Cil

Libmono-Winforms1.0-Cil

Libmono-Winforms2.0-Cil

Libmono0

Libmono1.0-Cil

Libmono2.0-Cil

Mono-Common

Mono-Devel

Mono-Gac

Mono-Gmcs

Mono-Jay

Mono-Jit

Mono-Mjs

Mono-Runtime

References · 76

• https://bdu.fstec.ru/vul/2015-03512 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-5197 · Security Note
• https://bdu.fstec.ru/vul/2015-03523 · Security Note
• https://bdu.fstec.ru/vul/2015-03513 · Security Note
• https://bdu.fstec.ru/vul/2015-03519 · Security Note
• https://osv.dev/vulnerability/CVE-2007-5197 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03528 · Security Note
• https://bdu.fstec.ru/vul/2015-03556 · Security Note
• https://bdu.fstec.ru/vul/2015-03541 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-November/msg00249.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03529 · Security Note
• https://bdu.fstec.ru/vul/2015-03540 · Security Note
• https://bdu.fstec.ru/vul/2015-03511 · Security Note
• https://bdu.fstec.ru/vul/2015-03524 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-5197 · Vendor Advisory