Displaying 2 results from an estimated 2 matches for "file_printf".
Did you mean:
file_print
2007 Mar 29
2
Integer underflow in the "file" program before 4.20
Hello
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1536
"Integer underflow in the file_printf function in the "file" program
before 4.20 allows user-assisted attackers to execute arbitrary code via
a file that triggers a heap-based buffer overflow."
Is FreeBSD 5.x/6.x affected too? It looks the System has file 4.12. The
port has 4.20.
Regards,
Thomas
--
Terry Lambert:
&quo...
2007 May 23
0
FreeBSD Security Advisory FreeBSD-SA-07:04.file
...kground
The file(1) utility attempts to classify file system objects based on
filesystem, magic number and language tests.
The libmagic(3) library provides most of the functionality of file(1)
and may be used by other applications.
II. Problem Description
When writing data into a buffer in the file_printf function, the length
of the unused portion of the buffer is not correctly tracked, resulting
in a buffer overflow when processing certain files.
III. Impact
An attacker who can cause file(1) to be run on a maliciously constructed
input can cause file(1) to crash. It may be possible for such an a...