Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-5197

Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.

Published

2007-11-02T16:46:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application suse suse_linux_openexchange_server 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System debian debian_linux 4.0 No
Operating System opensuse opensuse 10.2 No
Operating System opensuse opensuse 10.3 No
Operating System suse suse_linux 1.0 No
Operating System suse suse_linux 8 No
Operating System suse suse_linux 8.0 No
Operating System suse suse_linux 9.0 No
Operating System suse suse_linux 9.0 No
Operating System suse suse_linux 10 No
Operating System suse suse_linux 10 No
Operating System suse suse_linux 10 No
Operating System suse suse_linux 10.0 No
Operating System suse suse_linux 10.0 No
Operating System suse suse_linux 10.0 No
Operating System suse suse_linux 10.0 No
Operating System suse suse_linux 10.0 No
Operating System suse suse_linux 10.1 No
Operating System suse suse_linux 10.1 No
Operating System suse suse_linux 10.1 No
Operating System suse suse_linux 10.1 No
Operating System suse suse_linux 10.1 No
Operating System suse suse_linux 10.2 No
Operating System suse suse_linux 10.2 No
Operating System suse suse_united_linux 1.0 No
Application mono mono ≤ 1.2.5.1 Yes
Application mono mono 1.0 Yes
Application mono mono 1.0.5 Yes
Application mono mono 1.1.4 Yes
Application mono mono 1.1.8.3 Yes
Application mono mono 1.1.13 Yes
Application mono mono 1.1.13.4 Yes
Application mono mono 1.1.13.6 Yes
Application mono mono 1.1.13.7 Yes
Application mono mono 1.1.17 Yes
Application mono mono 1.1.17.1 Yes
Application mono mono 1.1.18 Yes
References