CVE-2007-5197

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.
References
Link Resource
http://bugs.gentoo.org/attachment.cgi?id=134361&action=view
http://bugs.gentoo.org/show_bug.cgi?id=197067
http://secunia.com/advisories/27439
http://secunia.com/advisories/27493
http://secunia.com/advisories/27511
http://secunia.com/advisories/27583
http://secunia.com/advisories/27612
http://secunia.com/advisories/27639
http://secunia.com/advisories/27937
http://www.debian.org/security/2007/dsa-1397
http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:218
http://www.novell.com/linux/security/advisories/2007_23_sr.html
http://www.securityfocus.com/bid/26279
http://www.securitytracker.com/id?1018892
http://www.ubuntu.com/usn/usn-553-1
http://www.vupen.com/english/advisories/2007/3716
https://bugzilla.redhat.com/show_bug.cgi?id=367471
https://exchange.xforce.ibmcloud.com/vulnerabilities/38248
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00249.html
http://bugs.gentoo.org/attachment.cgi?id=134361&action=view
http://bugs.gentoo.org/show_bug.cgi?id=197067
http://secunia.com/advisories/27439
http://secunia.com/advisories/27493
http://secunia.com/advisories/27511
http://secunia.com/advisories/27583
http://secunia.com/advisories/27612
http://secunia.com/advisories/27639
http://secunia.com/advisories/27937
http://www.debian.org/security/2007/dsa-1397
http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:218
http://www.novell.com/linux/security/advisories/2007_23_sr.html
http://www.securityfocus.com/bid/26279
http://www.securitytracker.com/id?1018892
http://www.ubuntu.com/usn/usn-553-1
http://www.vupen.com/english/advisories/2007/3716
https://bugzilla.redhat.com/show_bug.cgi?id=367471
https://exchange.xforce.ibmcloud.com/vulnerabilities/38248
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00249.html
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:suse:suse_linux_openexchange_server:4.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:s390:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.0:*:retail_solution:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10:*:enterprise_desktop:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_desktop:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.0:*:personal:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.0:*:ppc:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.0:*:x86:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.0:*:x86_64:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.1:*:personal:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.1:*:ppc:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.1:*:x86:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.1:*:x86_64:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.2:*:personal:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:10.2:*:professional:*:*:*:*:*
cpe:2.3:o:suse:suse_united_linux:1.0:*:*:*:*:*:*:*
OR cpe:2.3:a:mono:mono:*:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.13:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.13.4:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.13.6:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.13.7:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.17:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.17.1:*:*:*:*:*:*:*
cpe:2.3:a:mono:mono:1.1.18:*:*:*:*:*:*:*

History

21 Nov 2024, 00:37

Type Values Removed Values Added
References () http://bugs.gentoo.org/attachment.cgi?id=134361&action=view - () http://bugs.gentoo.org/attachment.cgi?id=134361&action=view -
References () http://bugs.gentoo.org/show_bug.cgi?id=197067 - () http://bugs.gentoo.org/show_bug.cgi?id=197067 -
References () http://secunia.com/advisories/27439 - () http://secunia.com/advisories/27439 -
References () http://secunia.com/advisories/27493 - () http://secunia.com/advisories/27493 -
References () http://secunia.com/advisories/27511 - () http://secunia.com/advisories/27511 -
References () http://secunia.com/advisories/27583 - () http://secunia.com/advisories/27583 -
References () http://secunia.com/advisories/27612 - () http://secunia.com/advisories/27612 -
References () http://secunia.com/advisories/27639 - () http://secunia.com/advisories/27639 -
References () http://secunia.com/advisories/27937 - () http://secunia.com/advisories/27937 -
References () http://www.debian.org/security/2007/dsa-1397 - () http://www.debian.org/security/2007/dsa-1397 -
References () http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml - () http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2007:218 - () http://www.mandriva.com/security/advisories?name=MDKSA-2007:218 -
References () http://www.novell.com/linux/security/advisories/2007_23_sr.html - () http://www.novell.com/linux/security/advisories/2007_23_sr.html -
References () http://www.securityfocus.com/bid/26279 - () http://www.securityfocus.com/bid/26279 -
References () http://www.securitytracker.com/id?1018892 - () http://www.securitytracker.com/id?1018892 -
References () http://www.ubuntu.com/usn/usn-553-1 - () http://www.ubuntu.com/usn/usn-553-1 -
References () http://www.vupen.com/english/advisories/2007/3716 - () http://www.vupen.com/english/advisories/2007/3716 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=367471 - () https://bugzilla.redhat.com/show_bug.cgi?id=367471 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/38248 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/38248 -
References () https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00249.html - () https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00249.html -

Information

Published : 2007-11-02 16:46

Updated : 2024-11-21 00:37


NVD link : CVE-2007-5197

Mitre link : CVE-2007-5197

CVE.ORG link : CVE-2007-5197


JSON object : View

Products Affected

opensuse

  • opensuse

mono

  • mono

suse

  • suse_united_linux
  • suse_linux
  • suse_linux_openexchange_server

debian

  • debian_linux
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer