[Mono] Buffer overflow in Mono 1.2.5.1 and earlier

Bug #162826 reported by disabled.user
254
Affects Status Importance Assigned to Milestone
mono (Ubuntu)
Fix Released
Undecided
Stephan Rügamer
Dapper
Fix Released
Medium
Kees Cook
Edgy
Fix Released
Medium
Kees Cook
Feisty
Fix Released
Medium
Kees Cook
Gutsy
Fix Released
Medium
Kees Cook

Bug Description

Binary package hint: mono

Description from CVE-2007-5197:
"Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors elated to Reduce in Montgomery-based Pow methods."

CVE References

Revision history for this message
Stephan Rügamer (sruegamer) wrote :

Working on it

Changed in mono:
assignee: nobody → shermann
status: New → In Progress
Revision history for this message
Stephan Rügamer (sruegamer) wrote :
Revision history for this message
Stephan Rügamer (sruegamer) wrote :
Revision history for this message
Stephan Rügamer (sruegamer) wrote :
Revision history for this message
Stephan Rügamer (sruegamer) wrote :
Revision history for this message
Kees Cook (kees) wrote :

Fixed in Hardy. Thanks for the patches; this should be published shortly for the other releases.

Changed in mono:
status: In Progress → Fix Released
assignee: nobody → keescook
importance: Undecided → Medium
status: New → Fix Committed
assignee: nobody → keescook
importance: Undecided → Medium
status: New → Fix Committed
assignee: nobody → keescook
importance: Undecided → Medium
status: New → Fix Committed
assignee: nobody → keescook
importance: Undecided → Medium
status: New → Fix Committed
Changed in mono:
status: Fix Committed → Fix Released
status: Fix Committed → Fix Released
status: Fix Committed → Fix Released
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.