Debian Security Advisory DSA-1422
(http://www.debian.org/security/2007/dsa-1422)

"Rafal Wojtczuk of McAfee AVERT Research discovered that e2fsprogs, ext2
file system utilities and libraries, contained multiple integer
overflows in memory allocations, based on sizes taken directly from
filesystem information. These could result in heap-based overflows
potentially allowing the execution of arbitrary code.

For the stable distribution (etch), this problem has been fixed in
version 1.39+1.40-WIP-2006.11.14+dfsg-2etch1."

-- 
[e2fsprogs] [CVE-2007-5497] several integer overflows in memory allocating code
https://bugs.launchpad.net/bugs/174174
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to