CVE-2007-0235

Severity: low (CVSS 3.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-16 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.

Affected products

Libgtop: through 2.14.5

References

http://bugzilla.gnome.org/show_bug.cgi?id=396477
http://ftp.gnome.org/pub/gnome/sources/libgtop/2.14/libgtop-2.14.6.news
http://osvdb.org/32815
http://secunia.com/advisories/23736
http://secunia.com/advisories/23777
http://secunia.com/advisories/23814
http://secunia.com/advisories/23840
http://secunia.com/advisories/23872
http://secunia.com/advisories/24015
http://secunia.com/advisories/26367
http://security.gentoo.org/glsa/glsa-200701-17.xml
http://www.debian.org/security/2007/dsa-1255

Get alerted when CVE-2007-0235 or the next vulnerability affects your stack