[Bug 367471] New: CVE-2007-5197: mono Math.BigInteger buffer overflow

[bugzilla@xxxxxxxxxx]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/show_bug.cgi?id=367471

           Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow
           Product: Fedora
           Version: f7
          Platform: All
               URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5197
        OS/Version: Linux
            Status: NEW
          Severity: low
          Priority: low
         Component: mono
        AssignedTo: alexl@xxxxxxxxxx
        ReportedBy: ville.skytta@xxxxxx
         QAContact: extras-qa@xxxxxxxxxxxxxxxxx
                CC: fedora-security-list@xxxxxxxxxx,paul@all-the-
                    johnsons.co.uk


http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5197

"Buffer overflow in the Mono.Math.BigInteger class in Mono allows
context-dependent attackers to execute arbitrary code via unspecified vectors."

Patch extracted from Debian's 1.2.2.1-1etch1 patchkit (attached) seems to apply
to 1.2.5.1 in devel with some line offsets, I have done no further analysis.

------- Additional Comments From ville.skytta@xxxxxx  2007-11-05 16:08 EST -------
Created an attachment (id=248611)
 --> (https://bugzilla.redhat.com/attachment.cgi?id=248611&action=view)
Patch from Debian


-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

--
Fedora-security-list mailing list
Fedora-security-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-security-list