CVE-2007-2799 - CVE House
Back to Database
Status published Medium CVE-2007-2799

Integer overflow in the "file" program 4.20, when running on...

Vulnerability Description

Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2799

Credits & Attribution

No credits recorded in the NVD database.

References

More from file

View All →
CVE-2007-1536
Integer underflow in the file_printf function in the "file" program...
Critical 9.3
CVE-2004-1304
Stack-based buffer overflow in the ELF header parsing code in...
Critical 10
CVE-2003-0102
Buffer overflow in tryelf() in readelf.c of the file command...
Medium 4.6

Affected Vendor

Affected Software

file, the sleuth kith
Vulnerable Versions:
4.2

Timeline

Official Publish: May 23rd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.