[Bug 367471] New: CVE-2007-5197: mono Math.BigInteger buffer overflow - security [ARCHIVED] - Fedora Mailing-Lists

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

[Bug 367471] New: CVE-2007-5197: mono Math.BigInteger buffer overflow

Re: Security Changes For Fedora 9

[Bug 357051] New: Django 0.96 i18n...

Red Hat Bugzilla

Monday, 5 November 2007 Mon, 5 Nov '07

3:08 p.m.

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. https://bugzilla.redhat.com/show_bug.cgi?id=367471 Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Product: Fedora Version: f7 Platform: All URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5197 OS/Version: Linux Status: NEW Severity: low Priority: low Component: mono AssignedTo: alexl(a)redhat.com ReportedBy: ville.skytta(a)iki.fi QAContact: extras-qa(a)fedoraproject.org CC: fedora-security-list@redhat.com,paul(a)all-the- johnsons.co.uk http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5197 "Buffer overflow in the Mono.Math.BigInteger class in Mono allows context-dependent attackers to execute arbitrary code via unspecified vectors." Patch extracted from Debian's 1.2.2.1-1etch1 patchkit (attached) seems to apply to 1.2.5.1 in devel with some line offsets, I have done no further analysis. ------- Additional Comments From ville.skytta(a)iki.fi 2007-11-05 16:08 EST ------- Created an attachment (id=248611) --> (https://bugzilla.redhat.com/attachment.cgi?id=248611&action=view) Patch from Debian -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Show replies by thread

Red Hat Bugzilla

Monday, 5 November Mon, 5 Nov

3:09 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 ville.skytta(a)iki.fi changed: What |Removed |Added ---------------------------------------------------------------------------- Alias| |CVE-2007-5197 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

3:47 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 ------- Additional Comments From lkundrak(a)redhat.com 2007-11-05 16:47 EST ------- Gentoo also has a patch, maybe a different one http://bugs.gentoo.org/show_bug.cgi?id=197067 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

3:48 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 lkundrak(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Component|mono |vulnerability Product|Fedora |Security Response Version|f7 |unspecified -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

3:48 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 lkundrak(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- BugsThisDependsOn| |367531 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

3:48 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 lkundrak(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- BugsThisDependsOn| |367541 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

3:49 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 lkundrak(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- BugsThisDependsOn| |367551 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

3:57 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 lkundrak(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- BugsThisDependsOn| |367571 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

Wednesday, 7 November Wed, 7 Nov

10:16 a.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 Bug 367471 depends on bug 367551, which changed state. Bug 367551 Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow [devel] https://bugzilla.redhat.com/show_bug.cgi?id=367551 What |Old Value |New Value ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |NEXTRELEASE -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

Thursday, 8 November Thu, 8 Nov

12:01 a.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 ------- Additional Comments From updates(a)fedoraproject.org 2007-11-08 01:01 EST ------- mono-1.2.5.1-2.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

12:01 a.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 updates(a)fedoraproject.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |ERRATA Fixed In Version| |1.2.5.1-2.fc8 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

Friday, 9 November Fri, 9 Nov

12:12 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 lkundrak(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |ASSIGNED Keywords| |Reopened Resolution|ERRATA | -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

12:14 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 Bug 367471 depends on bug 367541, which changed state. Bug 367541 Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow [f8] https://bugzilla.redhat.com/show_bug.cgi?id=367541 What |Old Value |New Value ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution| |CURRENTRELEASE -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

12:16 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 ------- Additional Comments From lkundrak(a)redhat.com 2007-11-09 13:16 EST ------- Alex: I'd urge this a bit. When are f6 and f7 versions likely to hit the repositories? (I've noticed there was some issue with libs on 64 bit platforms..?) -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

5:55 p.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 ------- Additional Comments From updates(a)fedoraproject.org 2007-11-09 18:55 EST ------- mono-1.2.3-5.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

Thursday, 20 December Thu, 20 Dec

5:59 a.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 Bug 367471 depends on bug 367531, which changed state. Bug 367531 Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow [f7] https://bugzilla.redhat.com/show_bug.cgi?id=367531 What |Old Value |New Value ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution| |ERRATA -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

6 a.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 Bug 367471 depends on bug 367571, which changed state. Bug 367571 Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow [fc6] https://bugzilla.redhat.com/show_bug.cgi?id=367571 What |Old Value |New Value ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |WONTFIX -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

Red Hat Bugzilla

6:01 a.m.

New subject: [Bug 367471] CVE-2007-5197: mono Math.BigInteger buffer overflow

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-5197: mono Math.BigInteger buffer overflow Alias: CVE-2007-5197 https://bugzilla.redhat.com/show_bug.cgi?id=367471 thoger(a)redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |ERRATA ------- Additional Comments From thoger(a)redhat.com 2007-12-20 07:01 EST ------- Fedora updates: https://admin.fedoraproject.org/updates/F7/FEDORA-2007-3130 https://admin.fedoraproject.org/updates/F8/FEDORA-2007-2969 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Reply

5966

days inactive

6011

days old

security@lists.fedoraproject.org

Manage subscription

17 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla