file vulnerability

2007-06-1100:00:00

ubuntu.com

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.023

Percentile

89.7%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Details

USN-439-1 fixed a vulnerability in file. The original fix did not
fully solve the problem. This update provides a more complete solution.

Original advisory details:

Jean-Sebastien Guay-Leroux discovered that “file” did not correctly
check the size of allocated heap memory. If a user were tricked into
examining a specially crafted file with the “file” utility, a remote
attacker could execute arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibmagic1< 4.19-1ubuntu2.1UNKNOWN
Ubuntu6.10noarchlibmagic1< 4.17-2ubuntu1.2UNKNOWN
Ubuntu6.06noarchlibmagic1< 4.16-0ubuntu3.2UNKNOWN