CVE-2007-2026: High severity Gentoo File vulnerability
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2026?
CVE-2007-2026 has been classified as a vulnerability that can lead to a denial of service due to excessive CPU consumption.
How do I fix CVE-2007-2026?
To mitigate CVE-2007-2026, update to the latest version of the affected software or apply relevant patches provided by the vendor.
What causes the denial of service in CVE-2007-2026?
The denial of service in CVE-2007-2026 is caused by the gnu regular expression code mishandling a crafted document with numerous line feed characters.
Which software is affected by CVE-2007-2026?
CVE-2007-2026 affects versions of Gentoo Linux's file 4.20 and AMaViS virus scanner.
Can CVE-2007-2026 be exploited remotely?
Yes, CVE-2007-2026 can be exploited by context-dependent attackers through specially crafted documents.