CVE-2007-1536: file Numeric Errors

Modified

AliasesRHSA-2007:0124DEBIAN-CVE-2007-1536DSA-1274-1

Published 20-03-2007Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2007-1536 is a high (CVSS 9.3) Numeric Errors vulnerability in file. EPSS estimates a 13.55% chance of exploitation in the next 30 days, higher than 96.4% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 19-03-2007)

Source freshness unavailable

How is this decided?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

13.55%

0%100%

Medium · +0.10 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10755-1

Timeline

20-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

13.55%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

Increase +0.10 pp

From 13.45% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaseremotelinuxVerified
File(1) 4.13 - Command File_PrintF Integer Underflow
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat2 products

file< 0:4.10-3.EL4.5 | < 0:4.17-9.el5
file-debuginfo< 0:4.10-3.EL4.5 | < 0:4.17-9.el5

Debian1 product

file< 4.12-1sarge1 | < 4.17-5etch1 | < 4.20-1

File1 product

file≤ 4.19

3 vendors · 4 products

References

52 links

secunia.com/advisories/27314Third Party AdvisoryX Refsource SECUNIAVendor Advisory
docs.info.apple.com/article.html?artnum=305530X Refsource CONFIRM
secunia.com/advisories/25393Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29179Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/1939VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/bid/23021VDB EntryX Refsource BID
secunia.com/advisories/24616Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1017796VDB EntryX Refsource SECTRACK
openbsd.org/errata40.htmlVendor AdvisoryX Refsource OPENBSD
secunia.com/advisories/27307Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 52 references

mx.gw.com/pipermail/file/2007/000161.htmlMailing ListX Refsource MLISTPatch
www.mandriva.com/security/advisories?name=MDKSA-2007:067Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/archive/1/477950/100/0/threadedMailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2007_5_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/24723Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/24754Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2007/May/msg00004.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/25402Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0124.htmlVendor AdvisoryX Refsource REDHAT
bugs.gentoo.org/show_bug.cgi?id=171452X Refsource CONFIRM
secunia.com/advisories/25989Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/24604Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658VDB EntrySignatureX Refsource OVAL
www.novell.com/linux/security/advisories/2007_40_file.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/25931Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2007/dsa-1274Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/24617Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/36283VDB EntryX Refsource XF
www.vupen.com/english/advisories/2007/1040VDB EntryX Refsource VUPENVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2007-179.htmX Refsource CONFIRM
secunia.com/advisories/25133Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.freebsd.org/advisories/FreeBSD-SA-07:04.file.ascVendor AdvisoryX Refsource FREEBSD
www.ubuntu.com/usn/usn-439-1Vendor AdvisoryX Refsource UBUNTU
www.kb.cert.org/vuls/id/606700Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/24608Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/477861/100/0/threadedMailing ListX Refsource BUGTRAQ
security.gentoo.org/glsa/glsa-200703-26.xmlVendor AdvisoryX Refsource GENTOO
security.gentoo.org/glsa/glsa-200710-19.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/24548Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/24592Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1148X Refsource CONFIRM
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.512926Vendor AdvisoryX Refsource SLACKWARE
access.redhat.com/errata/RHSA-2007:0124Advisory
bugzilla.redhat.com/show_bug.cgi?id=233337REPORT
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=233161REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0124.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1536REPORT
bugzilla.redhat.com/show_bug.cgi?id=233164REPORT
www.cve.org/CVERecord?id=CVE-2007-1536Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1536Advisory
security-tracker.debian.org/tracker/CVE-2007-1536Advisory