- Vulnerability/
- RHSA-2007:0473
RHSA-2007:0473: Moderate: gcc security and bug fix update
First published: Mon Jun 11 2007(Updated: )
The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95<br>GNU compilers and related support libraries.<br>Jürgen Weigert discovered a directory traversal flaw in fastjar. An<br>attacker could create a malicious JAR file which, if unpacked using<br>fastjar, could write to any files the victim had write access to.<br>(CVE-2006-3619)<br>These updated packages also fix a reload internal compiler error with<br><li>fnon-call-exceptions option. </li> All users of gcc should upgrade to these updated packages, which resolve<br>these issues.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Compiler Collection |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2007:0473?
The severity of RHSA-2007:0473 is classified as moderate.
How do I fix RHSA-2007:0473?
To fix RHSA-2007:0473, you should update the gcc packages to the latest version provided by your vendor.
What is the impact of RHSA-2007:0473?
The impact of RHSA-2007:0473 includes the potential for an attacker to exploit a directory traversal flaw for unauthorized file access.
Which versions of GCC are affected by RHSA-2007:0473?
RHSA-2007:0473 affects multiple versions of the GCC compiler packages.
Who discovered the vulnerability in RHSA-2007:0473?
The directory traversal flaw in RHSA-2007:0473 was discovered by Jürgen Weigert.
- agent/references
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2007:0473
- agent/trending
- agent/title
- agent/remedy
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/gnu compiler collection (gcc)