CVE-2007-3641: freebsd libarchive
Vulnerability summary
CVE-2007-3641 is a high (CVSS 9.3) vulnerability in freebsd libarchive. EPSS estimates a 7.43% chance of exploitation in the next 30 days, higher than 94.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 14-07-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PAX or (2) TAR archive that triggers a buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.43%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.43% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- libarchive< 2.2.4-1
Freebsd1 product
- libarchive≤ 2.2.3
2 vendors · 2 products
References
17 links- bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924X Refsource CONFIRM
Show all 17 references
- people.freebsd.org/~kientzle/libarchive/X Refsource CONFIRM