CVE-2007-5197

EPSS 3.62%
Veröffentlicht 02.11.2007 16:46:00
Zuletzt bearbeitet 16.06.2026 22:45:38
Erkennungen
Login

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 23

NVD 12 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mono ≫ Mono Version <= 1.2.5.1

   Suse ≫ Suse Linux Openexchange Server Version 4.0
   Debian ≫ Debian Linux Version 4.0 Edition alpha
   Debian ≫ Debian Linux Version 4.0 Edition amd64
   Debian ≫ Debian Linux Version 4.0 Edition arm
   Debian ≫ Debian Linux Version 4.0 Edition hppa
   Debian ≫ Debian Linux Version 4.0 Edition ia-32
   Debian ≫ Debian Linux Version 4.0 Edition ia-64
   Debian ≫ Debian Linux Version 4.0 Edition m68k
   Debian ≫ Debian Linux Version 4.0 Edition mips
   Debian ≫ Debian Linux Version 4.0 Edition mipsel
   Debian ≫ Debian Linux Version 4.0 Edition powerpc
   Debian ≫ Debian Linux Version 4.0 Edition s390
   Debian ≫ Debian Linux Version 4.0 Edition sparc
   Opensuse ≫ Opensuse Version 10.2
   Opensuse ≫ Opensuse Version 10.3
   Suse ≫ Suse Linux Version 1.0
   Suse ≫ Suse Linux Version 8 Edition enterprise_server
   Suse ≫ Suse Linux Version 8.0 Edition retail_solution
   Suse ≫ Suse Linux Version 9.0
   Suse ≫ Suse Linux Version 9.0 Edition enterprise_server
   Suse ≫ Suse Linux Version 10 Edition enterprise_desktop
   Suse ≫ Suse Linux Version 10 Edition enterprise_server
   Suse ≫ Suse Linux Version 10 Update sp1 Edition enterprise_desktop
   Suse ≫ Suse Linux Version 10.0 Edition personal
   Suse ≫ Suse Linux Version 10.0 Edition ppc
   Suse ≫ Suse Linux Version 10.0 Edition professional
   Suse ≫ Suse Linux Version 10.0 Edition x86
   Suse ≫ Suse Linux Version 10.0 Edition x86_64
   Suse ≫ Suse Linux Version 10.1 Edition personal
   Suse ≫ Suse Linux Version 10.1 Edition ppc
   Suse ≫ Suse Linux Version 10.1 Edition professional
   Suse ≫ Suse Linux Version 10.1 Edition x86
   Suse ≫ Suse Linux Version 10.1 Edition x86_64
   Suse ≫ Suse Linux Version 10.2 Edition personal
   Suse ≫ Suse Linux Version 10.2 Edition professional
   Suse ≫ Suse United Linux Version 1.0

Mono ≫ Mono Version 1.0

Mono ≫ Mono Version 1.0.5

Mono ≫ Mono Version 1.1.4

Mono ≫ Mono Version 1.1.8.3

Mono ≫ Mono Version 1.1.13

Mono ≫ Mono Version 1.1.13.4

Mono ≫ Mono Version 1.1.13.6

Mono ≫ Mono Version 1.1.13.7

Mono ≫ Mono Version 1.1.17

Mono ≫ Mono Version 1.1.17.1

Mono ≫ Mono Version 1.1.18

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.62%	0.88

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/27439

http://www.novell.com/linux/security/advisories/2007_23_sr.html

http://bugs.gentoo.org/attachment.cgi?id=134361&action=view

http://bugs.gentoo.org/show_bug.cgi?id=197067

http://secunia.com/advisories/27493

http://secunia.com/advisories/27511

http://secunia.com/advisories/27583

http://secunia.com/advisories/27612

http://secunia.com/advisories/27639

http://secunia.com/advisories/27937

http://www.debian.org/security/2007/dsa-1397

http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2007:218

http://www.securityfocus.com/bid/26279

http://www.securitytracker.com/id?1018892

http://www.ubuntu.com/usn/usn-553-1

http://www.vupen.com/english/advisories/2007/3716

https://bugzilla.redhat.com/show_bug.cgi?id=367471

https://exchange.xforce.ibmcloud.com/vulnerabilities/38248

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00249.html

https://nvd.nist.gov/vuln/detail/CVE-2007-5197

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-5197

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-5197

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-5197