CVE-2007-5225: sun sunos Numeric Errors

EPSS trend

Probability

0.97%

Chance of exploitation in the next 30 days

Percentile

62%

Versus all other CVEs

30-day change

0.00 pp

From 0.97% on 21-09-2026

21-09-202621-10-2026

EPSS score

0.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaselocalsolarisVerified
Solaris (SPARC/x86) - fifofs I_PEEK Kernel Memory Disclosure
Maturity: weaponized
exploit-databaselocalsolarisVerified
Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak
Maturity: weaponized

References

13 links

www.securityfocus.com/archive/1/481501/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/27654Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.exploit-db.com/exploits/5227ExploitX Refsource EXPLOIT DB
secunia.com/advisories/27024Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2007-463.htmX Refsource CONFIRM
www.securityfocus.com/bid/25905VDB EntryX Refsource BID
www.vupen.com/english/advisories/2007/3339VDB EntryX Refsource VUPENVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/36918VDB EntryX Refsource XF
www.exploit-db.com/exploits/4516ExploitX Refsource EXPLOIT DB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2170VDB EntrySignatureX Refsource OVAL

Show all 13 references

sunsolve.sun.com/search/document.do?assetkey=1-26-103061-1Vendor AdvisoryX Refsource SUNALERT
www.securitytracker.com/id?1018766VDB EntryX Refsource SECTRACK
labs.idefense.com/intelligence/vulnerabilities/display.php?id=603Third Party AdvisoryX Refsource IDEFENSE

Related vulnerabilities

CVE-2008-2710sunopensolaris+20.59%18y ago16-06-2008 20:00Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large value of the imsf->imsf_numsrc field, which triggers an out-of-bounds write of kernel memory. NOTE: this was reported as an integer overflow, but the root cause involves the bypass of a signed comparison.CVE-2000-0844calderaopenlinux_ebuilder+1415.63%25y ago22-01-2001 05:00Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.CVE-2000-0471sunsolaris+11.35%26y ago13-10-2000 04:00Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.CVE-2000-0118redhatlinux+20.79%26y ago08-02-2000 05:00The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.CVE-2000-0055sunsolaris+10.34%26y ago04-02-2000 05:00Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.CVE-1999-1297sunsunos0.34%24y ago09-03-2002 05:00cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.

All vulnerabilities insunos

CVE-2007-5225: sun sunos Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References