Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows…
Priority LOW 39CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.
Why it matters now
EPSS 0.0362 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 48
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:suse:suse_linux_openexchange_server:4.0:*:*:*:*:*:*:* | 4.0 | Running on | SUSE |
| cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:* | 4.0 | Running on | Debian |
- cpe:2.3:a:suse:suse_linux_openexchange_server:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·SUSE
- cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:* Versions 4.0 Running on ·Debian
Show 38 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:s390:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:* | 4.0 | Running on | Debian |
| cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:* | 10.2 | Running on | openSUSE |
| cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:* | 10.3 | Running on | openSUSE |
| cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:* | 1.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:* | 8 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:8.0:*:retail_solution:*:*:*:*:* | 8.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* | 9.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:* | 9.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10:*:enterprise_desktop:*:*:*:*:* | 10 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10:*:enterprise_server:*:*:*:*:* | 10 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_desktop:*:*:*:*:* | 10 sp1 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.0:*:personal:*:*:*:*:* | 10.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.0:*:ppc:*:*:*:*:* | 10.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:* | 10.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.0:*:x86:*:*:*:*:* | 10.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.0:*:x86_64:*:*:*:*:* | 10.0 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.1:*:personal:*:*:*:*:* | 10.1 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.1:*:ppc:*:*:*:*:* | 10.1 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:* | 10.1 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.1:*:x86:*:*:*:*:* | 10.1 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.1:*:x86_64:*:*:*:*:* | 10.1 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.2:*:personal:*:*:*:*:* | 10.2 | Running on | SUSE |
| cpe:2.3:o:suse:suse_linux:10.2:*:professional:*:*:*:*:* | 10.2 | Running on | SUSE |
| cpe:2.3:o:suse:suse_united_linux:1.0:*:*:*:*:*:*:* | 1.0 | Running on | SUSE |
| cpe:2.3:a:mono:mono:*:*:*:*:*:*:*:* | up to 1.2.5.1 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:* | 1.0.5 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.4:*:*:*:*:*:*:* | 1.1.4 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.8.3:*:*:*:*:*:*:* | 1.1.8.3 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.13:*:*:*:*:*:*:* | 1.1.13 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.13.4:*:*:*:*:*:*:* | 1.1.13.4 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.13.6:*:*:*:*:*:*:* | 1.1.13.6 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.13.7:*:*:*:*:*:*:* | 1.1.13.7 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.17:*:*:*:*:*:*:* | 1.1.17 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.17.1:*:*:*:*:*:*:* | 1.1.17.1 | Vulnerable | mono |
| cpe:2.3:a:mono:mono:1.1.18:*:*:*:*:*:*:* | 1.1.18 | Vulnerable | mono |
- cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:s390:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:* Versions 4.0 Running on ·Debian
- cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:* Versions 10.2 Running on ·openSUSE
- cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:* Versions 10.3 Running on ·openSUSE
- cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:* Versions 8 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:8.0:*:retail_solution:*:*:*:*:* Versions 8.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:* Versions 9.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10:*:enterprise_desktop:*:*:*:*:* Versions 10 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10:*:enterprise_server:*:*:*:*:* Versions 10 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_desktop:*:*:*:*:* Versions 10 sp1 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.0:*:personal:*:*:*:*:* Versions 10.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.0:*:ppc:*:*:*:*:* Versions 10.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:* Versions 10.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.0:*:x86:*:*:*:*:* Versions 10.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.0:*:x86_64:*:*:*:*:* Versions 10.0 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.1:*:personal:*:*:*:*:* Versions 10.1 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.1:*:ppc:*:*:*:*:* Versions 10.1 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.1:*:professional:*:*:*:*:* Versions 10.1 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.1:*:x86:*:*:*:*:* Versions 10.1 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.1:*:x86_64:*:*:*:*:* Versions 10.1 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.2:*:personal:*:*:*:*:* Versions 10.2 Running on ·SUSE
- cpe:2.3:o:suse:suse_linux:10.2:*:professional:*:*:*:*:* Versions 10.2 Running on ·SUSE
- cpe:2.3:o:suse:suse_united_linux:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·SUSE
- cpe:2.3:a:mono:mono:*:*:*:*:*:*:*:* Versions up to 1.2.5.1 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.8.3:*:*:*:*:*:*:* Versions 1.1.8.3 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.13:*:*:*:*:*:*:* Versions 1.1.13 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.13.4:*:*:*:*:*:*:* Versions 1.1.13.4 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.13.6:*:*:*:*:*:*:* Versions 1.1.13.6 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.13.7:*:*:*:*:*:*:* Versions 1.1.13.7 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.17:*:*:*:*:*:*:* Versions 1.1.17 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.17.1:*:*:*:*:*:*:* Versions 1.1.17.1 Vulnerable ·mono
- cpe:2.3:a:mono:mono:1.1.18:*:*:*:*:*:*:* Versions 1.1.18 Vulnerable ·mono
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2007-5197
- 2026-10-03 Alias added: GHSA-8q96-3494-9v8r
References
More Mono vulnerabilities
- TI-2010-04003 Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly… CVSS 2.0HIGH 7.5
- TI-2005-00466 Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of… CVSS 2.0MEDIUM 4.3
- TI-2011-00852 Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before… CVSS 2.0MEDIUM 6.8
- TI-2011-00853 Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before… CVSS 2.0MEDIUM 5.8
- TI-2011-00850 The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x… CVSS 2.0MEDIUM 5.8
- TI-2011-00851 Race condition in the FastCopy optimization in the Array.Copy method in metadata/icall.c… CVSS 2.0MEDIUM 5.8
Sources
- CVE-2007-5197 · CVE Program
- CVE-2007-5197 · NVD
- FIRST EPSS
- GHSA-8q96-3494-9v8r · GitHub Advisory Database · CC BY 4.0
- CVE-2007-5197 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences