Unrated severityNVD Advisory· Published Jun 4, 2007· Updated Jun 16, 2026
CVE-2007-2452
CVE-2007-2452
Description
Heap-based buffer overflow in the visit_old_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036.
Affected products
7cpe:2.3:a:gnu:findutils:4.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:gnu:findutils:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:findutils:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:findutils:4.2.28:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:findutils:4.2.29:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:findutils:4.2.30:*:*:*:*:*:*:*
- (no CPE)range: <4.2.31
Patches
Vulnerability mechanics
References
11- secunia.com/advisories/25477nvdPatchVendor Advisory
- www.securityfocus.com/bid/24250nvdPatch
- itrc.hp.com/service/cki/docDisplay.donvd
- osvdb.org/36827nvd
- secunia.com/advisories/40551nvd
- securityreason.com/securityalert/2760nvd
- www.securityfocus.com/archive/1/470108/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/2015nvd
- www.vupen.com/english/advisories/2010/1796nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/34628nvd
News mentions
0No linked articles in our index yet.