{"id":"CVE-2007-2799","aliases":["DEBIAN-CVE-2007-2799","DSA-1343-1","DSA-1343-2","EUVD-2007-2791","GHSA-g967-rw3c-p2f7","RHSA-2007:0391","openSUSE-SU-2024:10755-1"],"status":"published","title":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products...","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02702,"percentile":0.86036,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2007-05-23T21:00:00Z","modified":"2026-10-21T17:47:49Z","fixes":[{"ecosystem":"Debian:12","package":"file","fixed_in":["4.21-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"file","fixed_in":["4.21-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"file","fixed_in":["4.21-1"],"sources":["osv"]},{"ecosystem":"Debian:3.1","package":"file","fixed_in":["4.12-1sarge2"],"sources":["osv"]},{"ecosystem":"Debian:4.0","package":"file","fixed_in":["4.17-5etch2","4.17-5etch3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"file","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"file-debuginfo","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"file","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"file-debuginfo","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"file","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"file-debuginfo","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"file","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"file-debuginfo","fixed_in":["0:4.10-3.0.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"file","fixed_in":["0:4.17-9.0.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"file-debuginfo","fixed_in":["0:4.17-9.0.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"file","fixed_in":["0:4.17-9.0.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"file-debuginfo","fixed_in":["0:4.17-9.0.1.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21-1"}]}]},{"source":"osv","ecosystem":"Debian:3.1","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-1sarge2"}]}],"versions":["4.12-1","4.12-1sarge1"]},{"source":"osv","ecosystem":"Debian:4.0","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-5etch2"}]}],"versions":["4.17-5etch1"]},{"source":"osv","ecosystem":"Debian:4.0","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-5etch3"}]}],"versions":["4.17-5etch1","4.17-5etch2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10-3.0.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.17-9.0.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.17-9.0.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.17-9.0.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.17-9.0.1.el5"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.40-1.14"}]}],"bundled":7}],"products":[{"vendor":"file","product":"file"},{"vendor":"sleuth_kit","product":"the_sleuth_kith"}],"references":[{"url":"http://www.debian.org/security/2007/dsa-1343","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/29179","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.trustix.org/errata/2007/0024/","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/26415","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/0924/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securitytracker.com/id?1018140","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.novell.com/linux/security/advisories/2007_40_file.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"https://issues.rpath.com/browse/RPL-1311","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/25931","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.amavis.org/security/asa-2007-3.txt","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/25544","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/29420","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:114","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0391.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/25578","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/469520/30/6420/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34731","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2007/2071","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/25394","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred","advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307562","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/26294","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/26203","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200705-25.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11012","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/24146","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://osvdb.org/38498","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-439-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2799","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g967-rw3c-p2f7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-2799","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0391","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=241022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=241026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=241027","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0391.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-2799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2799","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8907","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2007-2799","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","status":"published","published":"2007-05-23T21:00:00Z","modified":"2024-08-07T13:49:57.399Z","updated_at":"2026-11-02T13:32:34.372976Z"}],"euvd":[{"id":"EUVD-2007-2791","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","status":"published","published":"2007-05-23T21:00:00Z","modified":"2024-08-07T13:49:57Z","updated_at":"2026-11-03T01:38:19.624156Z"}],"ghsa":[{"id":"GHSA-g967-rw3c-p2f7","title":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products...","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","status":"published","published":"2022-05-03T03:18:10Z","modified":"2023-02-01T05:01:24Z","updated_at":"2026-11-02T14:49:43.293288Z"}],"nvd":[{"id":"CVE-2007-2799","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","status":"published","published":"2007-05-23T21:30:00Z","modified":"2026-06-16T22:40:27.487Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:01:16.479378Z"}],"osv":[{"id":"CVE-2007-2799","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","status":"published","published":"2007-05-23T21:30:00Z","modified":"2026-04-10T03:39:07.865541Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2007-2799","description":"Integer overflow in the \"file\" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.","status":"published","published":"2007-05-23T21:30:00Z","modified":"2026-10-21T17:47:49.097652158Z","updated_at":"2026-11-02T15:45:23.411908Z"},{"id":"DSA-1343-1","title":"file","status":"published","published":"2007-08-02T00:00:00Z","modified":"2026-03-09T01:01:34.651483Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1343-2","title":"file","status":"published","published":"2007-08-02T00:00:00Z","modified":"2026-03-09T01:00:43.008708Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"openSUSE-SU-2024:10755-1","title":"file-5.40-1.14 on GA media","description":"These are all security issues fixed in the file-5.40-1.14 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:44:55.810237Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2007:0391","title":"Red Hat Security Advisory: file security update","status":"published","published":"2024-09-15T16:44:07Z","modified":"2026-06-26T10:06:28Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}