CVE-2007-5197 Memory corruption in n/a

High 7.5 Published Updated

A buffer overflow in the Mono.Math.BigInteger class allows attackers to execute arbitrary code via unspecified vectors.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is CVE-2007-5197?

CVE-2007-5197 is a high-severity memory corruption vulnerability in n/a, published on 2 Nov 2007.

Official description

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.

Weakness: CWE-119

Which versions are affected by CVE-2007-5197?

It affects 1 product.

Products include Mono Mono.

How do I fix CVE-2007-5197?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2007-5197 being exploited?

There is no known exploitation of CVE-2007-5197 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2007-5197, DSA-1397-1, DTSA-76-1, GHSA-8q96-3494-9v8r.

Is CVE-2007-5197 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free