CVE-2003-0102

CVE-2003-0102 describes a local buffer overflow in file’s tryelf() (readelf.c) that can allow arbitrary code execution as the user running file, potentially triggered by a crafted ELF header value (elfhdr.e_shentsize). Connected advisories indicate patches are available for the vulnerable file pa...

CVE-2003-0102: Undefined Security Weakness

Buffer overflow in tryelf in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header elfhdr.eshentsize...