{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:file:file:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DDA4B95-1EEE-4EF9-8155-DDC349952C24",
              "versionEndIncluding": "4.19",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow."
    },
    {
      "lang": "es",
      "value": "Un subdesbordamiento de enteros en la funci\u00f3n file_printf en el programa \"file\" anterior a versi\u00f3n 4.20, permite a los atacantes asistidos por el usuario ejecutar c\u00f3digo arbitrario por medio de un archivo que desencadena un desbordamiento de b\u00fafer en la regi\u00f3n heap de la memoria."
    }
  ],
  "id": "CVE-2007-1536",
  "lastModified": "2024-11-21T00:28:33.540",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-03-20T20:19:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://docs.info.apple.com/article.html?artnum=305530"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://mx.gw.com/pipermail/file/2007/000161.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://openbsd.org/errata40.html#015_file"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24548"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24592"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24604"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24608"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24616"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24617"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24723"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24754"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25133"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25393"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25402"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25931"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25989"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27307"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27314"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/29179"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:04.file.asc"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200703-26.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200710-19.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.512926"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2007/dsa-1274"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/606700"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:067"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_40_file.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_5_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0124.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/477861/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/477950/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/23021"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1017796"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-439-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1040"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1939"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=171452"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36283"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1148"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://docs.info.apple.com/article.html?artnum=305530"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://mx.gw.com/pipermail/file/2007/000161.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openbsd.org/errata40.html#015_file"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24548"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24592"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24604"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24608"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24616"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24617"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24723"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24754"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25133"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25393"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25402"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25931"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25989"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27307"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/27314"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/29179"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:04.file.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200703-26.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200710-19.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.512926"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2007/dsa-1274"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/606700"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:067"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_40_file.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_5_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0124.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/477861/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/477950/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/23021"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017796"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-439-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1040"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/1939"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=171452"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36283"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1148"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated file package that fixes a security flaw is now available for Red\nHat Enterprise Linux 4 and 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The file command is used to identify a particular file according to the\ntype of data contained by the file.\n\nAn integer underflow flaw was found in the file utility.  An attacker could\ncreate a carefully crafted file which, if examined by a victim using the\nfile utility, could lead to arbitrary code execution. (CVE-2007-1536)\n\nThis issue did not affect the version of the file utility distributed with\nRed Hat Enterprise Linux 2.1 or 3.\n\nUsers should upgrade to this erratum package, which contain a backported\npatch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0124",
        "url": "https://access.redhat.com/errata/RHSA-2007:0124"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "233161",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233161"
      },
      {
        "category": "external",
        "summary": "233337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233337"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0124.json"
      }
    ],
    "title": "Red Hat Security Advisory: file security update",
    "tracking": {
      "current_release_date": "2024-11-22T00:56:45+00:00",
      "generator": {
        "date": "2024-11-22T00:56:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2007:0124",
      "initial_release_date": "2007-03-23T10:08:00+00:00",
      "revision_history": [
        {
          "date": "2007-03-23T10:08:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2007-03-23T06:08:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T00:56:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.ia64",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.ia64",
                  "product_id": "file-0:4.10-3.EL4.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.ia64",
                "product": {
                  "name": "file-0:4.17-9.el5.ia64",
                  "product_id": "file-0:4.17-9.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.ia64",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.ia64",
                  "product_id": "file-debuginfo-0:4.17-9.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.src",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.src",
                  "product_id": "file-0:4.10-3.EL4.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.src",
                "product": {
                  "name": "file-0:4.17-9.el5.src",
                  "product_id": "file-0:4.17-9.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.x86_64",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.x86_64",
                  "product_id": "file-0:4.10-3.EL4.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.x86_64",
                "product": {
                  "name": "file-0:4.17-9.el5.x86_64",
                  "product_id": "file-0:4.17-9.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.x86_64",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.x86_64",
                  "product_id": "file-debuginfo-0:4.17-9.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.i386",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.i386",
                  "product_id": "file-0:4.10-3.EL4.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.i386",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.i386",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.i386",
                "product": {
                  "name": "file-0:4.17-9.el5.i386",
                  "product_id": "file-0:4.17-9.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.i386",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.i386",
                  "product_id": "file-debuginfo-0:4.17-9.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.ppc",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.ppc",
                  "product_id": "file-0:4.10-3.EL4.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.ppc",
                "product": {
                  "name": "file-0:4.17-9.el5.ppc",
                  "product_id": "file-0:4.17-9.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.ppc",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.ppc",
                  "product_id": "file-debuginfo-0:4.17-9.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.s390",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.s390",
                  "product_id": "file-0:4.10-3.EL4.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.s390",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.s390",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.s390x",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.s390x",
                  "product_id": "file-0:4.10-3.EL4.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.s390x",
                "product": {
                  "name": "file-0:4.17-9.el5.s390x",
                  "product_id": "file-0:4.17-9.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.s390x",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.s390x",
                  "product_id": "file-debuginfo-0:4.17-9.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.i386"
        },
        "product_reference": "file-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.src"
        },
        "product_reference": "file-0:4.17-9.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.i386"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.i386"
        },
        "product_reference": "file-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.src"
        },
        "product_reference": "file-0:4.17-9.el5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.i386"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-1536",
      "discovery_date": "2007-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "233164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "file 4.20 fixes a heap overflow in that can result in arbitrary code execution",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:file-0:4.10-3.EL4.5.i386",
          "4AS:file-0:4.10-3.EL4.5.ia64",
          "4AS:file-0:4.10-3.EL4.5.ppc",
          "4AS:file-0:4.10-3.EL4.5.s390",
          "4AS:file-0:4.10-3.EL4.5.s390x",
          "4AS:file-0:4.10-3.EL4.5.src",
          "4AS:file-0:4.10-3.EL4.5.x86_64",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4Desktop:file-0:4.10-3.EL4.5.i386",
          "4Desktop:file-0:4.10-3.EL4.5.ia64",
          "4Desktop:file-0:4.10-3.EL4.5.ppc",
          "4Desktop:file-0:4.10-3.EL4.5.s390",
          "4Desktop:file-0:4.10-3.EL4.5.s390x",
          "4Desktop:file-0:4.10-3.EL4.5.src",
          "4Desktop:file-0:4.10-3.EL4.5.x86_64",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4ES:file-0:4.10-3.EL4.5.i386",
          "4ES:file-0:4.10-3.EL4.5.ia64",
          "4ES:file-0:4.10-3.EL4.5.ppc",
          "4ES:file-0:4.10-3.EL4.5.s390",
          "4ES:file-0:4.10-3.EL4.5.s390x",
          "4ES:file-0:4.10-3.EL4.5.src",
          "4ES:file-0:4.10-3.EL4.5.x86_64",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4WS:file-0:4.10-3.EL4.5.i386",
          "4WS:file-0:4.10-3.EL4.5.ia64",
          "4WS:file-0:4.10-3.EL4.5.ppc",
          "4WS:file-0:4.10-3.EL4.5.s390",
          "4WS:file-0:4.10-3.EL4.5.s390x",
          "4WS:file-0:4.10-3.EL4.5.src",
          "4WS:file-0:4.10-3.EL4.5.x86_64",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "5Client:file-0:4.17-9.el5.i386",
          "5Client:file-0:4.17-9.el5.ia64",
          "5Client:file-0:4.17-9.el5.ppc",
          "5Client:file-0:4.17-9.el5.s390x",
          "5Client:file-0:4.17-9.el5.src",
          "5Client:file-0:4.17-9.el5.x86_64",
          "5Client:file-debuginfo-0:4.17-9.el5.i386",
          "5Client:file-debuginfo-0:4.17-9.el5.ia64",
          "5Client:file-debuginfo-0:4.17-9.el5.ppc",
          "5Client:file-debuginfo-0:4.17-9.el5.s390x",
          "5Client:file-debuginfo-0:4.17-9.el5.x86_64",
          "5Server:file-0:4.17-9.el5.i386",
          "5Server:file-0:4.17-9.el5.ia64",
          "5Server:file-0:4.17-9.el5.ppc",
          "5Server:file-0:4.17-9.el5.s390x",
          "5Server:file-0:4.17-9.el5.src",
          "5Server:file-0:4.17-9.el5.x86_64",
          "5Server:file-debuginfo-0:4.17-9.el5.i386",
          "5Server:file-debuginfo-0:4.17-9.el5.ia64",
          "5Server:file-debuginfo-0:4.17-9.el5.ppc",
          "5Server:file-debuginfo-0:4.17-9.el5.s390x",
          "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1536"
        },
        {
          "category": "external",
          "summary": "RHBZ#233164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1536",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1536"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536"
        }
      ],
      "release_date": "2007-02-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-03-23T10:08:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:file-0:4.10-3.EL4.5.i386",
            "4AS:file-0:4.10-3.EL4.5.ia64",
            "4AS:file-0:4.10-3.EL4.5.ppc",
            "4AS:file-0:4.10-3.EL4.5.s390",
            "4AS:file-0:4.10-3.EL4.5.s390x",
            "4AS:file-0:4.10-3.EL4.5.src",
            "4AS:file-0:4.10-3.EL4.5.x86_64",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4Desktop:file-0:4.10-3.EL4.5.i386",
            "4Desktop:file-0:4.10-3.EL4.5.ia64",
            "4Desktop:file-0:4.10-3.EL4.5.ppc",
            "4Desktop:file-0:4.10-3.EL4.5.s390",
            "4Desktop:file-0:4.10-3.EL4.5.s390x",
            "4Desktop:file-0:4.10-3.EL4.5.src",
            "4Desktop:file-0:4.10-3.EL4.5.x86_64",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4ES:file-0:4.10-3.EL4.5.i386",
            "4ES:file-0:4.10-3.EL4.5.ia64",
            "4ES:file-0:4.10-3.EL4.5.ppc",
            "4ES:file-0:4.10-3.EL4.5.s390",
            "4ES:file-0:4.10-3.EL4.5.s390x",
            "4ES:file-0:4.10-3.EL4.5.src",
            "4ES:file-0:4.10-3.EL4.5.x86_64",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4WS:file-0:4.10-3.EL4.5.i386",
            "4WS:file-0:4.10-3.EL4.5.ia64",
            "4WS:file-0:4.10-3.EL4.5.ppc",
            "4WS:file-0:4.10-3.EL4.5.s390",
            "4WS:file-0:4.10-3.EL4.5.s390x",
            "4WS:file-0:4.10-3.EL4.5.src",
            "4WS:file-0:4.10-3.EL4.5.x86_64",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "5Client:file-0:4.17-9.el5.i386",
            "5Client:file-0:4.17-9.el5.ia64",
            "5Client:file-0:4.17-9.el5.ppc",
            "5Client:file-0:4.17-9.el5.s390x",
            "5Client:file-0:4.17-9.el5.src",
            "5Client:file-0:4.17-9.el5.x86_64",
            "5Client:file-debuginfo-0:4.17-9.el5.i386",
            "5Client:file-debuginfo-0:4.17-9.el5.ia64",
            "5Client:file-debuginfo-0:4.17-9.el5.ppc",
            "5Client:file-debuginfo-0:4.17-9.el5.s390x",
            "5Client:file-debuginfo-0:4.17-9.el5.x86_64",
            "5Server:file-0:4.17-9.el5.i386",
            "5Server:file-0:4.17-9.el5.ia64",
            "5Server:file-0:4.17-9.el5.ppc",
            "5Server:file-0:4.17-9.el5.s390x",
            "5Server:file-0:4.17-9.el5.src",
            "5Server:file-0:4.17-9.el5.x86_64",
            "5Server:file-debuginfo-0:4.17-9.el5.i386",
            "5Server:file-debuginfo-0:4.17-9.el5.ia64",
            "5Server:file-debuginfo-0:4.17-9.el5.ppc",
            "5Server:file-debuginfo-0:4.17-9.el5.s390x",
            "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0124"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "file 4.20 fixes a heap overflow in that can result in arbitrary code execution"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated file package that fixes a security flaw is now available for Red\nHat Enterprise Linux 4 and 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The file command is used to identify a particular file according to the\ntype of data contained by the file.\n\nAn integer underflow flaw was found in the file utility.  An attacker could\ncreate a carefully crafted file which, if examined by a victim using the\nfile utility, could lead to arbitrary code execution. (CVE-2007-1536)\n\nThis issue did not affect the version of the file utility distributed with\nRed Hat Enterprise Linux 2.1 or 3.\n\nUsers should upgrade to this erratum package, which contain a backported\npatch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0124",
        "url": "https://access.redhat.com/errata/RHSA-2007:0124"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "233161",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233161"
      },
      {
        "category": "external",
        "summary": "233337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233337"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0124.json"
      }
    ],
    "title": "Red Hat Security Advisory: file security update",
    "tracking": {
      "current_release_date": "2024-11-22T00:56:45+00:00",
      "generator": {
        "date": "2024-11-22T00:56:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2007:0124",
      "initial_release_date": "2007-03-23T10:08:00+00:00",
      "revision_history": [
        {
          "date": "2007-03-23T10:08:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2007-03-23T06:08:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T00:56:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.ia64",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.ia64",
                  "product_id": "file-0:4.10-3.EL4.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.ia64",
                "product": {
                  "name": "file-0:4.17-9.el5.ia64",
                  "product_id": "file-0:4.17-9.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.ia64",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.ia64",
                  "product_id": "file-debuginfo-0:4.17-9.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.src",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.src",
                  "product_id": "file-0:4.10-3.EL4.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.src",
                "product": {
                  "name": "file-0:4.17-9.el5.src",
                  "product_id": "file-0:4.17-9.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.x86_64",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.x86_64",
                  "product_id": "file-0:4.10-3.EL4.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.x86_64",
                "product": {
                  "name": "file-0:4.17-9.el5.x86_64",
                  "product_id": "file-0:4.17-9.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.x86_64",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.x86_64",
                  "product_id": "file-debuginfo-0:4.17-9.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.i386",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.i386",
                  "product_id": "file-0:4.10-3.EL4.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.i386",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.i386",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.i386",
                "product": {
                  "name": "file-0:4.17-9.el5.i386",
                  "product_id": "file-0:4.17-9.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.i386",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.i386",
                  "product_id": "file-debuginfo-0:4.17-9.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.ppc",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.ppc",
                  "product_id": "file-0:4.10-3.EL4.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.ppc",
                "product": {
                  "name": "file-0:4.17-9.el5.ppc",
                  "product_id": "file-0:4.17-9.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.ppc",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.ppc",
                  "product_id": "file-debuginfo-0:4.17-9.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.s390",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.s390",
                  "product_id": "file-0:4.10-3.EL4.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.s390",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.s390",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.s390x",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.s390x",
                  "product_id": "file-0:4.10-3.EL4.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.s390x",
                "product": {
                  "name": "file-0:4.17-9.el5.s390x",
                  "product_id": "file-0:4.17-9.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.s390x",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.s390x",
                  "product_id": "file-debuginfo-0:4.17-9.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.i386"
        },
        "product_reference": "file-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.src"
        },
        "product_reference": "file-0:4.17-9.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.i386"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.i386"
        },
        "product_reference": "file-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.src"
        },
        "product_reference": "file-0:4.17-9.el5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.i386"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-1536",
      "discovery_date": "2007-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "233164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "file 4.20 fixes a heap overflow in that can result in arbitrary code execution",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:file-0:4.10-3.EL4.5.i386",
          "4AS:file-0:4.10-3.EL4.5.ia64",
          "4AS:file-0:4.10-3.EL4.5.ppc",
          "4AS:file-0:4.10-3.EL4.5.s390",
          "4AS:file-0:4.10-3.EL4.5.s390x",
          "4AS:file-0:4.10-3.EL4.5.src",
          "4AS:file-0:4.10-3.EL4.5.x86_64",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4Desktop:file-0:4.10-3.EL4.5.i386",
          "4Desktop:file-0:4.10-3.EL4.5.ia64",
          "4Desktop:file-0:4.10-3.EL4.5.ppc",
          "4Desktop:file-0:4.10-3.EL4.5.s390",
          "4Desktop:file-0:4.10-3.EL4.5.s390x",
          "4Desktop:file-0:4.10-3.EL4.5.src",
          "4Desktop:file-0:4.10-3.EL4.5.x86_64",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4ES:file-0:4.10-3.EL4.5.i386",
          "4ES:file-0:4.10-3.EL4.5.ia64",
          "4ES:file-0:4.10-3.EL4.5.ppc",
          "4ES:file-0:4.10-3.EL4.5.s390",
          "4ES:file-0:4.10-3.EL4.5.s390x",
          "4ES:file-0:4.10-3.EL4.5.src",
          "4ES:file-0:4.10-3.EL4.5.x86_64",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4WS:file-0:4.10-3.EL4.5.i386",
          "4WS:file-0:4.10-3.EL4.5.ia64",
          "4WS:file-0:4.10-3.EL4.5.ppc",
          "4WS:file-0:4.10-3.EL4.5.s390",
          "4WS:file-0:4.10-3.EL4.5.s390x",
          "4WS:file-0:4.10-3.EL4.5.src",
          "4WS:file-0:4.10-3.EL4.5.x86_64",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "5Client:file-0:4.17-9.el5.i386",
          "5Client:file-0:4.17-9.el5.ia64",
          "5Client:file-0:4.17-9.el5.ppc",
          "5Client:file-0:4.17-9.el5.s390x",
          "5Client:file-0:4.17-9.el5.src",
          "5Client:file-0:4.17-9.el5.x86_64",
          "5Client:file-debuginfo-0:4.17-9.el5.i386",
          "5Client:file-debuginfo-0:4.17-9.el5.ia64",
          "5Client:file-debuginfo-0:4.17-9.el5.ppc",
          "5Client:file-debuginfo-0:4.17-9.el5.s390x",
          "5Client:file-debuginfo-0:4.17-9.el5.x86_64",
          "5Server:file-0:4.17-9.el5.i386",
          "5Server:file-0:4.17-9.el5.ia64",
          "5Server:file-0:4.17-9.el5.ppc",
          "5Server:file-0:4.17-9.el5.s390x",
          "5Server:file-0:4.17-9.el5.src",
          "5Server:file-0:4.17-9.el5.x86_64",
          "5Server:file-debuginfo-0:4.17-9.el5.i386",
          "5Server:file-debuginfo-0:4.17-9.el5.ia64",
          "5Server:file-debuginfo-0:4.17-9.el5.ppc",
          "5Server:file-debuginfo-0:4.17-9.el5.s390x",
          "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1536"
        },
        {
          "category": "external",
          "summary": "RHBZ#233164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1536",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1536"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536"
        }
      ],
      "release_date": "2007-02-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-03-23T10:08:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:file-0:4.10-3.EL4.5.i386",
            "4AS:file-0:4.10-3.EL4.5.ia64",
            "4AS:file-0:4.10-3.EL4.5.ppc",
            "4AS:file-0:4.10-3.EL4.5.s390",
            "4AS:file-0:4.10-3.EL4.5.s390x",
            "4AS:file-0:4.10-3.EL4.5.src",
            "4AS:file-0:4.10-3.EL4.5.x86_64",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4Desktop:file-0:4.10-3.EL4.5.i386",
            "4Desktop:file-0:4.10-3.EL4.5.ia64",
            "4Desktop:file-0:4.10-3.EL4.5.ppc",
            "4Desktop:file-0:4.10-3.EL4.5.s390",
            "4Desktop:file-0:4.10-3.EL4.5.s390x",
            "4Desktop:file-0:4.10-3.EL4.5.src",
            "4Desktop:file-0:4.10-3.EL4.5.x86_64",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4ES:file-0:4.10-3.EL4.5.i386",
            "4ES:file-0:4.10-3.EL4.5.ia64",
            "4ES:file-0:4.10-3.EL4.5.ppc",
            "4ES:file-0:4.10-3.EL4.5.s390",
            "4ES:file-0:4.10-3.EL4.5.s390x",
            "4ES:file-0:4.10-3.EL4.5.src",
            "4ES:file-0:4.10-3.EL4.5.x86_64",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4WS:file-0:4.10-3.EL4.5.i386",
            "4WS:file-0:4.10-3.EL4.5.ia64",
            "4WS:file-0:4.10-3.EL4.5.ppc",
            "4WS:file-0:4.10-3.EL4.5.s390",
            "4WS:file-0:4.10-3.EL4.5.s390x",
            "4WS:file-0:4.10-3.EL4.5.src",
            "4WS:file-0:4.10-3.EL4.5.x86_64",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "5Client:file-0:4.17-9.el5.i386",
            "5Client:file-0:4.17-9.el5.ia64",
            "5Client:file-0:4.17-9.el5.ppc",
            "5Client:file-0:4.17-9.el5.s390x",
            "5Client:file-0:4.17-9.el5.src",
            "5Client:file-0:4.17-9.el5.x86_64",
            "5Client:file-debuginfo-0:4.17-9.el5.i386",
            "5Client:file-debuginfo-0:4.17-9.el5.ia64",
            "5Client:file-debuginfo-0:4.17-9.el5.ppc",
            "5Client:file-debuginfo-0:4.17-9.el5.s390x",
            "5Client:file-debuginfo-0:4.17-9.el5.x86_64",
            "5Server:file-0:4.17-9.el5.i386",
            "5Server:file-0:4.17-9.el5.ia64",
            "5Server:file-0:4.17-9.el5.ppc",
            "5Server:file-0:4.17-9.el5.s390x",
            "5Server:file-0:4.17-9.el5.src",
            "5Server:file-0:4.17-9.el5.x86_64",
            "5Server:file-debuginfo-0:4.17-9.el5.i386",
            "5Server:file-debuginfo-0:4.17-9.el5.ia64",
            "5Server:file-debuginfo-0:4.17-9.el5.ppc",
            "5Server:file-debuginfo-0:4.17-9.el5.s390x",
            "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0124"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "file 4.20 fixes a heap overflow in that can result in arbitrary code execution"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated file package that fixes a security flaw is now available for Red\nHat Enterprise Linux 4 and 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The file command is used to identify a particular file according to the\ntype of data contained by the file.\n\nAn integer underflow flaw was found in the file utility.  An attacker could\ncreate a carefully crafted file which, if examined by a victim using the\nfile utility, could lead to arbitrary code execution. (CVE-2007-1536)\n\nThis issue did not affect the version of the file utility distributed with\nRed Hat Enterprise Linux 2.1 or 3.\n\nUsers should upgrade to this erratum package, which contain a backported\npatch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0124",
        "url": "https://access.redhat.com/errata/RHSA-2007:0124"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "233161",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233161"
      },
      {
        "category": "external",
        "summary": "233337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233337"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0124.json"
      }
    ],
    "title": "Red Hat Security Advisory: file security update",
    "tracking": {
      "current_release_date": "2024-11-22T00:56:45+00:00",
      "generator": {
        "date": "2024-11-22T00:56:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2007:0124",
      "initial_release_date": "2007-03-23T10:08:00+00:00",
      "revision_history": [
        {
          "date": "2007-03-23T10:08:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2007-03-23T06:08:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T00:56:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.ia64",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.ia64",
                  "product_id": "file-0:4.10-3.EL4.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.ia64",
                "product": {
                  "name": "file-0:4.17-9.el5.ia64",
                  "product_id": "file-0:4.17-9.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.ia64",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.ia64",
                  "product_id": "file-debuginfo-0:4.17-9.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.src",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.src",
                  "product_id": "file-0:4.10-3.EL4.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.src",
                "product": {
                  "name": "file-0:4.17-9.el5.src",
                  "product_id": "file-0:4.17-9.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.x86_64",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.x86_64",
                  "product_id": "file-0:4.10-3.EL4.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.x86_64",
                "product": {
                  "name": "file-0:4.17-9.el5.x86_64",
                  "product_id": "file-0:4.17-9.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.x86_64",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.x86_64",
                  "product_id": "file-debuginfo-0:4.17-9.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.i386",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.i386",
                  "product_id": "file-0:4.10-3.EL4.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.i386",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.i386",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.i386",
                "product": {
                  "name": "file-0:4.17-9.el5.i386",
                  "product_id": "file-0:4.17-9.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.i386",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.i386",
                  "product_id": "file-debuginfo-0:4.17-9.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.ppc",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.ppc",
                  "product_id": "file-0:4.10-3.EL4.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.ppc",
                "product": {
                  "name": "file-0:4.17-9.el5.ppc",
                  "product_id": "file-0:4.17-9.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.ppc",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.ppc",
                  "product_id": "file-debuginfo-0:4.17-9.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.s390",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.s390",
                  "product_id": "file-0:4.10-3.EL4.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.s390",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.s390",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "file-0:4.10-3.EL4.5.s390x",
                "product": {
                  "name": "file-0:4.10-3.EL4.5.s390x",
                  "product_id": "file-0:4.10-3.EL4.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.10-3.EL4.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                "product": {
                  "name": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                  "product_id": "file-debuginfo-0:4.10-3.EL4.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.10-3.EL4.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-0:4.17-9.el5.s390x",
                "product": {
                  "name": "file-0:4.17-9.el5.s390x",
                  "product_id": "file-0:4.17-9.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file@4.17-9.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "file-debuginfo-0:4.17-9.el5.s390x",
                "product": {
                  "name": "file-debuginfo-0:4.17-9.el5.s390x",
                  "product_id": "file-debuginfo-0:4.17-9.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/file-debuginfo@4.17-9.el5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.src"
        },
        "product_reference": "file-0:4.10-3.EL4.5.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.i386"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.s390"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.10-3.EL4.5.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.10-3.EL4.5.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.i386"
        },
        "product_reference": "file-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.src"
        },
        "product_reference": "file-0:4.17-9.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.i386"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:file-debuginfo-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.i386"
        },
        "product_reference": "file-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.src"
        },
        "product_reference": "file-0:4.17-9.el5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.i386"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.ia64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.ppc"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.s390x"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "file-debuginfo-0:4.17-9.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
        },
        "product_reference": "file-debuginfo-0:4.17-9.el5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-1536",
      "discovery_date": "2007-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "233164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "file 4.20 fixes a heap overflow in that can result in arbitrary code execution",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:file-0:4.10-3.EL4.5.i386",
          "4AS:file-0:4.10-3.EL4.5.ia64",
          "4AS:file-0:4.10-3.EL4.5.ppc",
          "4AS:file-0:4.10-3.EL4.5.s390",
          "4AS:file-0:4.10-3.EL4.5.s390x",
          "4AS:file-0:4.10-3.EL4.5.src",
          "4AS:file-0:4.10-3.EL4.5.x86_64",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4Desktop:file-0:4.10-3.EL4.5.i386",
          "4Desktop:file-0:4.10-3.EL4.5.ia64",
          "4Desktop:file-0:4.10-3.EL4.5.ppc",
          "4Desktop:file-0:4.10-3.EL4.5.s390",
          "4Desktop:file-0:4.10-3.EL4.5.s390x",
          "4Desktop:file-0:4.10-3.EL4.5.src",
          "4Desktop:file-0:4.10-3.EL4.5.x86_64",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4ES:file-0:4.10-3.EL4.5.i386",
          "4ES:file-0:4.10-3.EL4.5.ia64",
          "4ES:file-0:4.10-3.EL4.5.ppc",
          "4ES:file-0:4.10-3.EL4.5.s390",
          "4ES:file-0:4.10-3.EL4.5.s390x",
          "4ES:file-0:4.10-3.EL4.5.src",
          "4ES:file-0:4.10-3.EL4.5.x86_64",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "4WS:file-0:4.10-3.EL4.5.i386",
          "4WS:file-0:4.10-3.EL4.5.ia64",
          "4WS:file-0:4.10-3.EL4.5.ppc",
          "4WS:file-0:4.10-3.EL4.5.s390",
          "4WS:file-0:4.10-3.EL4.5.s390x",
          "4WS:file-0:4.10-3.EL4.5.src",
          "4WS:file-0:4.10-3.EL4.5.x86_64",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.i386",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.s390",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x",
          "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
          "5Client:file-0:4.17-9.el5.i386",
          "5Client:file-0:4.17-9.el5.ia64",
          "5Client:file-0:4.17-9.el5.ppc",
          "5Client:file-0:4.17-9.el5.s390x",
          "5Client:file-0:4.17-9.el5.src",
          "5Client:file-0:4.17-9.el5.x86_64",
          "5Client:file-debuginfo-0:4.17-9.el5.i386",
          "5Client:file-debuginfo-0:4.17-9.el5.ia64",
          "5Client:file-debuginfo-0:4.17-9.el5.ppc",
          "5Client:file-debuginfo-0:4.17-9.el5.s390x",
          "5Client:file-debuginfo-0:4.17-9.el5.x86_64",
          "5Server:file-0:4.17-9.el5.i386",
          "5Server:file-0:4.17-9.el5.ia64",
          "5Server:file-0:4.17-9.el5.ppc",
          "5Server:file-0:4.17-9.el5.s390x",
          "5Server:file-0:4.17-9.el5.src",
          "5Server:file-0:4.17-9.el5.x86_64",
          "5Server:file-debuginfo-0:4.17-9.el5.i386",
          "5Server:file-debuginfo-0:4.17-9.el5.ia64",
          "5Server:file-debuginfo-0:4.17-9.el5.ppc",
          "5Server:file-debuginfo-0:4.17-9.el5.s390x",
          "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1536"
        },
        {
          "category": "external",
          "summary": "RHBZ#233164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1536",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1536"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536"
        }
      ],
      "release_date": "2007-02-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-03-23T10:08:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:file-0:4.10-3.EL4.5.i386",
            "4AS:file-0:4.10-3.EL4.5.ia64",
            "4AS:file-0:4.10-3.EL4.5.ppc",
            "4AS:file-0:4.10-3.EL4.5.s390",
            "4AS:file-0:4.10-3.EL4.5.s390x",
            "4AS:file-0:4.10-3.EL4.5.src",
            "4AS:file-0:4.10-3.EL4.5.x86_64",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4AS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4Desktop:file-0:4.10-3.EL4.5.i386",
            "4Desktop:file-0:4.10-3.EL4.5.ia64",
            "4Desktop:file-0:4.10-3.EL4.5.ppc",
            "4Desktop:file-0:4.10-3.EL4.5.s390",
            "4Desktop:file-0:4.10-3.EL4.5.s390x",
            "4Desktop:file-0:4.10-3.EL4.5.src",
            "4Desktop:file-0:4.10-3.EL4.5.x86_64",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4Desktop:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4ES:file-0:4.10-3.EL4.5.i386",
            "4ES:file-0:4.10-3.EL4.5.ia64",
            "4ES:file-0:4.10-3.EL4.5.ppc",
            "4ES:file-0:4.10-3.EL4.5.s390",
            "4ES:file-0:4.10-3.EL4.5.s390x",
            "4ES:file-0:4.10-3.EL4.5.src",
            "4ES:file-0:4.10-3.EL4.5.x86_64",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4ES:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "4WS:file-0:4.10-3.EL4.5.i386",
            "4WS:file-0:4.10-3.EL4.5.ia64",
            "4WS:file-0:4.10-3.EL4.5.ppc",
            "4WS:file-0:4.10-3.EL4.5.s390",
            "4WS:file-0:4.10-3.EL4.5.s390x",
            "4WS:file-0:4.10-3.EL4.5.src",
            "4WS:file-0:4.10-3.EL4.5.x86_64",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.i386",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.ia64",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.ppc",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.s390",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.s390x",
            "4WS:file-debuginfo-0:4.10-3.EL4.5.x86_64",
            "5Client:file-0:4.17-9.el5.i386",
            "5Client:file-0:4.17-9.el5.ia64",
            "5Client:file-0:4.17-9.el5.ppc",
            "5Client:file-0:4.17-9.el5.s390x",
            "5Client:file-0:4.17-9.el5.src",
            "5Client:file-0:4.17-9.el5.x86_64",
            "5Client:file-debuginfo-0:4.17-9.el5.i386",
            "5Client:file-debuginfo-0:4.17-9.el5.ia64",
            "5Client:file-debuginfo-0:4.17-9.el5.ppc",
            "5Client:file-debuginfo-0:4.17-9.el5.s390x",
            "5Client:file-debuginfo-0:4.17-9.el5.x86_64",
            "5Server:file-0:4.17-9.el5.i386",
            "5Server:file-0:4.17-9.el5.ia64",
            "5Server:file-0:4.17-9.el5.ppc",
            "5Server:file-0:4.17-9.el5.s390x",
            "5Server:file-0:4.17-9.el5.src",
            "5Server:file-0:4.17-9.el5.x86_64",
            "5Server:file-debuginfo-0:4.17-9.el5.i386",
            "5Server:file-debuginfo-0:4.17-9.el5.ia64",
            "5Server:file-debuginfo-0:4.17-9.el5.ppc",
            "5Server:file-debuginfo-0:4.17-9.el5.s390x",
            "5Server:file-debuginfo-0:4.17-9.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0124"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "file 4.20 fixes a heap overflow in that can result in arbitrary code execution"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2007-1536"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-03-20T20:19:00Z",
    "severity": "HIGH"
  },
  "details": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.",
  "id": "GHSA-h28w-vfj4-vh5j",
  "modified": "2022-05-03T03:18:06Z",
  "published": "2022-05-03T03:18:06Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1536"
    },
    {
      "type": "WEB",
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=171452"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36283"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1148"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658"
    },
    {
      "type": "WEB",
      "url": "http://docs.info.apple.com/article.html?artnum=305530"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
    },
    {
      "type": "WEB",
      "url": "http://mx.gw.com/pipermail/file/2007/000161.html"
    },
    {
      "type": "WEB",
      "url": "http://openbsd.org/errata40.html#015_file"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24548"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24592"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24604"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24608"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24616"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24617"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24723"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24754"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25133"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25393"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25402"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25931"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/25989"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27307"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/27314"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29179"
    },
    {
      "type": "WEB",
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:04.file.asc"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200703-26.xml"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200710-19.xml"
    },
    {
      "type": "WEB",
      "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.512926"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2007/dsa-1274"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/606700"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:067"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_40_file.html"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_5_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0124.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/477861/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/477950/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/23021"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1017796"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-439-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1040"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1939"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2007-1536",
    "description": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.",
    "id": "GSD-2007-1536",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-1536.html",
      "https://www.debian.org/security/2007/dsa-1274",
      "https://access.redhat.com/errata/RHSA-2007:0124",
      "https://linux.oracle.com/cve/CVE-2007-1536.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-1536"
      ],
      "details": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.",
      "id": "GSD-2007-1536",
      "modified": "2023-12-13T01:21:40.050668Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-1536",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "27314",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27314"
          },
          {
            "name": "http://docs.info.apple.com/article.html?artnum=305530",
            "refsource": "CONFIRM",
            "url": "http://docs.info.apple.com/article.html?artnum=305530"
          },
          {
            "name": "25393",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25393"
          },
          {
            "name": "29179",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29179"
          },
          {
            "name": "ADV-2007-1939",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1939"
          },
          {
            "name": "23021",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/23021"
          },
          {
            "name": "24616",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24616"
          },
          {
            "name": "1017796",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1017796"
          },
          {
            "name": "[4.0] 20070709 015: SECURITY FIX: July 9, 2007",
            "refsource": "OPENBSD",
            "url": "http://openbsd.org/errata40.html#015_file"
          },
          {
            "name": "27307",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/27307"
          },
          {
            "name": "[file] 20070302 file-4.20 is now available",
            "refsource": "MLIST",
            "url": "http://mx.gw.com/pipermail/file/2007/000161.html"
          },
          {
            "name": "MDKSA-2007:067",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:067"
          },
          {
            "name": "20070828 Re: OpenBSD 4.1 - Heap overflow vulnerabillity",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/477950/100/0/threaded"
          },
          {
            "name": "SUSE-SR:2007:005",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_5_sr.html"
          },
          {
            "name": "24723",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24723"
          },
          {
            "name": "24754",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24754"
          },
          {
            "name": "APPLE-SA-2007-05-24",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
          },
          {
            "name": "25402",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25402"
          },
          {
            "name": "RHSA-2007:0124",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0124.html"
          },
          {
            "name": "https://bugs.gentoo.org/show_bug.cgi?id=171452",
            "refsource": "CONFIRM",
            "url": "https://bugs.gentoo.org/show_bug.cgi?id=171452"
          },
          {
            "name": "25989",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25989"
          },
          {
            "name": "24604",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24604"
          },
          {
            "name": "oval:org.mitre.oval:def:10658",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658"
          },
          {
            "name": "SUSE-SA:2007:040",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_40_file.html"
          },
          {
            "name": "25931",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25931"
          },
          {
            "name": "DSA-1274",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2007/dsa-1274"
          },
          {
            "name": "24617",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24617"
          },
          {
            "name": "openbsd-file-bo(36283)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36283"
          },
          {
            "name": "ADV-2007-1040",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/1040"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm",
            "refsource": "CONFIRM",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm"
          },
          {
            "name": "25133",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/25133"
          },
          {
            "name": "FreeBSD-SA-07:04",
            "refsource": "FREEBSD",
            "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:04.file.asc"
          },
          {
            "name": "USN-439-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-439-1"
          },
          {
            "name": "NetBSD-SA2008-001",
            "refsource": "NETBSD",
            "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc"
          },
          {
            "name": "VU#606700",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/606700"
          },
          {
            "name": "24608",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24608"
          },
          {
            "name": "20070825 OpenBSD 4.1 - Heap overflow vulnerabillity",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/477861/100/0/threaded"
          },
          {
            "name": "GLSA-200703-26",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200703-26.xml"
          },
          {
            "name": "GLSA-200710-19",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200710-19.xml"
          },
          {
            "name": "24548",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24548"
          },
          {
            "name": "24592",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/24592"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1148",
            "refsource": "CONFIRM",
            "url": "https://issues.rpath.com/browse/RPL-1148"
          },
          {
            "name": "SSA:2007-093-01",
            "refsource": "SLACKWARE",
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.512926"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:file:file:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.19",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1536"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Integer underflow in the file_printf function in the \"file\" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-189"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[file] 20070302 file-4.20 is now available",
              "refsource": "MLIST",
              "tags": [
                "Patch"
              ],
              "url": "http://mx.gw.com/pipermail/file/2007/000161.html"
            },
            {
              "name": "https://bugs.gentoo.org/show_bug.cgi?id=171452",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugs.gentoo.org/show_bug.cgi?id=171452"
            },
            {
              "name": "24548",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24548"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1148",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1148"
            },
            {
              "name": "RHSA-2007:0124",
              "refsource": "REDHAT",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0124.html"
            },
            {
              "name": "USN-439-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-439-1"
            },
            {
              "name": "VU#606700",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/606700"
            },
            {
              "name": "23021",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/23021"
            },
            {
              "name": "1017796",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1017796"
            },
            {
              "name": "24604",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24604"
            },
            {
              "name": "24616",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24616"
            },
            {
              "name": "24617",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24617"
            },
            {
              "name": "24592",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24592"
            },
            {
              "name": "GLSA-200703-26",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200703-26.xml"
            },
            {
              "name": "24608",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24608"
            },
            {
              "name": "DSA-1274",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2007/dsa-1274"
            },
            {
              "name": "SUSE-SR:2007:005",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_5_sr.html"
            },
            {
              "name": "24723",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24723"
            },
            {
              "name": "SSA:2007-093-01",
              "refsource": "SLACKWARE",
              "tags": [],
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.512926"
            },
            {
              "name": "24754",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24754"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-179.htm"
            },
            {
              "name": "25133",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/25133"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=305530",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://docs.info.apple.com/article.html?artnum=305530"
            },
            {
              "name": "APPLE-SA-2007-05-24",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2007/May/msg00004.html"
            },
            {
              "name": "FreeBSD-SA-07:04",
              "refsource": "FREEBSD",
              "tags": [],
              "url": "http://security.freebsd.org/advisories/FreeBSD-SA-07:04.file.asc"
            },
            {
              "name": "GLSA-200710-19",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200710-19.xml"
            },
            {
              "name": "MDKSA-2007:067",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:067"
            },
            {
              "name": "[4.0] 20070709 015: SECURITY FIX: July 9, 2007",
              "refsource": "OPENBSD",
              "tags": [],
              "url": "http://openbsd.org/errata40.html#015_file"
            },
            {
              "name": "SUSE-SA:2007:040",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_40_file.html"
            },
            {
              "name": "25393",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/25393"
            },
            {
              "name": "25402",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/25402"
            },
            {
              "name": "25931",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/25931"
            },
            {
              "name": "25989",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/25989"
            },
            {
              "name": "27307",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/27307"
            },
            {
              "name": "27314",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/27314"
            },
            {
              "name": "NetBSD-SA2008-001",
              "refsource": "NETBSD",
              "tags": [],
              "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc"
            },
            {
              "name": "29179",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/29179"
            },
            {
              "name": "ADV-2007-1040",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/1040"
            },
            {
              "name": "ADV-2007-1939",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/1939"
            },
            {
              "name": "openbsd-file-bo(36283)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36283"
            },
            {
              "name": "oval:org.mitre.oval:def:10658",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10658"
            },
            {
              "name": "20070828 Re: OpenBSD 4.1 - Heap overflow vulnerabillity",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/477950/100/0/threaded"
            },
            {
              "name": "20070825 OpenBSD 4.1 - Heap overflow vulnerabillity",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/477861/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-16T16:38Z",
      "publishedDate": "2007-03-20T20:19Z"
    }
  }
}