Lucene search

[email protected]CVE-2007-5197

HistoryNov 02, 2007 - 4:46 p.m.

CVE-2007-5197

2007-11-0216:46:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-5197

buffer overflow

mono

biginteger class

arbitrary code execution

nvd

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.

Affected configurations

NVD

Node

susesuse_linux_openexchange_serverMatch4.0

debiandebian_linuxMatch4.0alpha

debiandebian_linuxMatch4.0amd64

debiandebian_linuxMatch4.0arm

debiandebian_linuxMatch4.0hppa

debiandebian_linuxMatch4.0ia-32

debiandebian_linuxMatch4.0ia-64

debiandebian_linuxMatch4.0m68k

debiandebian_linuxMatch4.0mips

debiandebian_linuxMatch4.0mipsel

debiandebian_linuxMatch4.0powerpc

debiandebian_linuxMatch4.0s390

debiandebian_linuxMatch4.0sparc

opensuseopensuseMatch10.2

opensuseopensuseMatch10.3

susesuse_linuxMatch1.0

susesuse_linuxMatch8enterprise_server

susesuse_linuxMatch8.0retail_solution

susesuse_linuxMatch9.0

susesuse_linuxMatch9.0enterprise_server

susesuse_linuxMatch10enterprise_desktop

susesuse_linuxMatch10enterprise_server

susesuse_linuxMatch10sp1enterprise_desktop

susesuse_linuxMatch10.0personal

susesuse_linuxMatch10.0ppc

susesuse_linuxMatch10.0professional

susesuse_linuxMatch10.0x86

susesuse_linuxMatch10.0x86_64

susesuse_linuxMatch10.1personal

susesuse_linuxMatch10.1ppc

susesuse_linuxMatch10.1professional

susesuse_linuxMatch10.1x86

susesuse_linuxMatch10.1x86_64

susesuse_linuxMatch10.2personal

susesuse_linuxMatch10.2professional

susesuse_united_linuxMatch1.0

AND

monomonoRange≤1.2.5.1

monomonoMatch1.0

monomonoMatch1.0.5

monomonoMatch1.1.4

monomonoMatch1.1.8.3

monomonoMatch1.1.13

monomonoMatch1.1.13.4

monomonoMatch1.1.13.6

monomonoMatch1.1.13.7

monomonoMatch1.1.17

monomonoMatch1.1.17.1

monomonoMatch1.1.18

CPENameOperatorVersion
mono:monomonole1.2.5.1
mono:monomonoeq1.0
mono:monomonoeq1.0.5
mono:monomonoeq1.1.4
mono:monomonoeq1.1.8.3
mono:monomonoeq1.1.13
mono:monomonoeq1.1.13.4
mono:monomonoeq1.1.13.6
mono:monomonoeq1.1.13.7
mono:monomonoeq1.1.17

CPE	Name	Operator	Version
mono:mono	mono	le	1.2.5.1
mono:mono	mono	eq	1.0
mono:mono	mono	eq	1.0.5
mono:mono	mono	eq	1.1.4
mono:mono	mono	eq	1.1.8.3
mono:mono	mono	eq	1.1.13
mono:mono	mono	eq	1.1.13.4
mono:mono	mono	eq	1.1.13.6
mono:mono	mono	eq	1.1.13.7
mono:mono	mono	eq	1.1.17