Unscored severity · published Jul 14, 2007
CVE-2007-3641
archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which…
–
CVSS
7.4%
EPSS
No
On KEV
Description
archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PAX or (2) TAR archive that triggers a buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libarchive · Freebsd
through 2.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3641
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3641
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924
osvdb.org
http://osvdb.org/38092
people.freebsd.org
http://people.freebsd.org/~kientzle/libarchive/
Patch
http://secunia.com/advisories/26050
Patch
http://secunia.com/advisories/26062
secunia.com
http://secunia.com/advisories/26355
More from Libarchive
–
CVE-2011-1779
Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other…
–
CVE-2011-1778
Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive
–
CVE-2011-1777
Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to…
–
CVE-2010-4666
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted…
–
CVE-2007-3645
archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (crash) via (1) an end-of-file condition within a…