CVE-2007-2452

The CVE-2007-2452 issue affects GNU findutils’ locate utility prior to version 4.2.31, where a heap-based buffer overflow in visit_old_format ( locate/locate.c ) allows a context-dependent attacker to execute arbitrary code via a long pathname in an old-format locate database. The vulnerability i...