Description
Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | file | 5.02-1 | — |
| Debian 13 | file | 5.02-1 | — |
| Debian 12 | file | 5.02-1 | — |
References
- MDVSA-2009:129 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603
- 34745 vdb-entry
- [file] 20090501 file 5.01 is now available mailing-list
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820
- 34881 third-party-advisory
- 54100 vdb-entry