PT-2008-1115 · Gnu · Libcdio
Published
2008-01-03
·
Updated
2017-08-08
·
CVE-2007-6613
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
libcdio versions 0.79 and earlier
libcdio versions prior to 0.78.2-r4
Description
The issue is related to a stack-based buffer overflow in the print iso9660 recurse function, which can be triggered by a disk or image containing a long joilet file name. This could lead to a denial of service or potentially allow the execution of arbitrary code. The vulnerability can be exploited remotely.
Recommendations
For libcdio versions 0.79 and earlier, update to a version later than 0.79 to resolve the issue.
For libcdio versions prior to 0.78.2-r4, update to version 0.78.2-r4 or later to fix the vulnerability.
As a temporary workaround, consider restricting access to disks or images that may contain long joilet file names to minimize the risk of exploitation.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libcdio