CVE-2007-5037

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-24 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.

Affected products

Inotify-Tools: through 3.10

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913
http://osvdb.org/40563
http://secunia.com/advisories/26825
http://secunia.com/advisories/27616
http://secunia.com/advisories/28221
http://sourceforge.net/project/shownotes.php?release_id=540277&group_id=171752
http://www.debian.org/security/2007/dsa-1440
http://www.securityfocus.com/bid/25724
https://exchange.xforce.ibmcloud.com/vulnerabilities/36687
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913
http://osvdb.org/40563

Get alerted when CVE-2007-5037 or the next vulnerability affects your stack