CVE-2007-3508

CVE-2007-3508 affects glibc before 2.5-rc4. The integer overflow occurs in the dynamic loader’s hardware capabilities mask handling (process_envvars in elf/rtld.c). If a large LD_HWCAP_MASK is supplied, memory allocation could overflow, potentially enabling arbitrary code execution by local users...