CVE-2007-3508

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large…

published July 3, 2007

CVSS
—
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Published
2007-07-03T21:00Z
EPSS history
Timeline
  • 03 JUL 21:00Z
    Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large…
    cvelistv5