PatchTheCVEfile vulnerabilities
Recent CVEs affecting file products. 4 tracked.
file has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-05-23. Highest priority: CVE-2004-1304 (score 69/100).
- CVE-2007-2799 MEDIUM 5.1 DOWNGRADE MITIGATE Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The
- CVE-2007-1536 HIGH 9.3 UPGRADE Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers
- CVE-2004-1304 HIGH 10.0 DOWNGRADE MITIGATE Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arb
- CVE-2003-0102 MEDIUM 4.6 DOWNGRADE MITIGATE Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the
FAQ
How do I fix file vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is file being exploited right now?
None of the tracked file CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which file CVE should I patch first?
CVE-2004-1304 currently ranks highest (69/100): Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arb.