CVE-2007-3508

EPSS 0.05%

Published: 7/3/2007Modified: 4/28/2026

Also known as:DEBIAN-CVE-2007-3508

Description

Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code execution

Affected packages (1)

Debian/glibcfrom 0, < 2.6-2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2007-3508