VULNERABILITY INTELLIGENCE

CVE-2007-5225

CVSS score4.9 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2007-10-05
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N

Description

Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl.

Primary references