CVE-2007-6613

Publication date 3 January 2008

Last updated 24 July 2024

Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
libcdio	7.10 gutsy	Fixed 0.76-1ubuntu2.7.10.1
	7.04 feisty	Fixed 0.76-1ubuntu2.7.04.1
	6.10 edgy	Fixed 0.76-1ubuntu1.6.10.1
	6.06 LTS dapper	Fixed 0.76-1ubuntu1.6.06.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-580-1
libcdio vulnerability
20 February 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2007-6613