CVE-2007-1536

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-20 · updated 2026-06-16
Weakness: CWE-189

Description

Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.

Affected products

File: through 4.19

References

http://docs.info.apple.com/article.html?artnum=305530
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
http://mx.gw.com/pipermail/file/2007/000161.html
http://openbsd.org/errata40.html#015_file
http://secunia.com/advisories/24548
http://secunia.com/advisories/24592
http://secunia.com/advisories/24604
http://secunia.com/advisories/24608
http://secunia.com/advisories/24616
http://secunia.com/advisories/24617
http://secunia.com/advisories/24723

Get alerted when CVE-2007-1536 or the next vulnerability affects your stack