National Cyber-Alert System

Vulnerability Summary for CVE-2007-5197

Overview

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2007-3130

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00249.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=367471

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=367471

External Source: XF

Name: mono-big-integer-bo(38248)

Hyperlink:http://xforce.iss.net/xforce/xfdb/38248

External Source: UBUNTU

Name: USN-553-1

Hyperlink:http://www.ubuntu.com/usn/usn-553-1

External Source: SECTRACK

Name: 1018892

Hyperlink:http://www.securitytracker.com/id?1018892

External Source: BID

Name: 26279

Hyperlink:http://www.securityfocus.com/bid/26279

External Source: SUSE

Name: SUSE-SR:2007:023

Hyperlink:http://www.novell.com/linux/security/advisories/2007_23_sr.html

External Source: MANDRIVA

Name: MDKSA-2007:218

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:218

External Source: GENTOO

Name: GLSA-200711-10

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml

External Source: VUPEN

Name: ADV-2007-3716

Hyperlink:http://www.frsirt.com/english/advisories/2007/3716

External Source: DEBIAN

Name: DSA-1397

Hyperlink:http://www.debian.org/security/2007/dsa-1397

External Source: SECUNIA

Name: 27937

Hyperlink:http://secunia.com/advisories/27937

External Source: SECUNIA

Name: 27639

Hyperlink:http://secunia.com/advisories/27639

External Source: SECUNIA

Name: 27612

Hyperlink:http://secunia.com/advisories/27612

External Source: SECUNIA

Name: 27583

Hyperlink:http://secunia.com/advisories/27583

External Source: SECUNIA

Name: 27511

Hyperlink:http://secunia.com/advisories/27511

External Source: SECUNIA

Name: 27493

Hyperlink:http://secunia.com/advisories/27493

External Source: SECUNIA

Name: 27439

Hyperlink:http://secunia.com/advisories/27439

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=197067

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=197067

External Source: CONFIRM

Name: http://bugs.gentoo.org/attachment.cgi?id=134361&action=view

Hyperlink:http://bugs.gentoo.org/attachment.cgi?id=134361&action=view