CVE-2007-1536: File

High severity, CVSS 9.3. EPSS: 13.5% chance of exploitation in the next 30 days.

Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.

Affected products

• File File: up to and including 4.19

Published 2007-03-20. Last modified 2026-06-16.