CVE-2009-0948: 
Linux Debian vulnerability analysis and mitigation

Multiple buffer overflows were discovered in the file utility before version 5.02, specifically affecting the cdf_read_sat, cdf_read_long_sector_chain, and cdf_read_ssat functions. The vulnerability was assigned CVE-2009-0948 and was discovered in early 2009, with the fix being released in version 5.02 (NVD, CVE Mitre).

The vulnerability received a CVSS v3.1 base score of 9.8 (Critical) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a critical severity level. The issue was classified as CWE-120 (Buffer Copy without Checking Size of Input), representing a classic buffer overflow vulnerability. The vulnerability specifically affected the CDF (Common Document Format) parsing implementation, which was introduced in file version 5.00 (NVD, Red Hat Bugzilla).

The vulnerability could allow remote attackers to execute arbitrary code or cause denial of service through specially crafted CDF files. Given the CVSS metrics, successful exploitation could lead to high impacts on confidentiality, integrity, and availability of the affected systems (NVD).

The vulnerability has a network attack vector with low attack complexity, requiring no privileges or user interaction for exploitation. This makes it highly exploitable, though there are no public reports of exploitation in the wild (NVD).

The vulnerability was fixed in file version 5.02. Users and organizations running affected versions should upgrade to version 5.02 or later to mitigate the risk. The fix was released by upstream developers and subsequently packaged by various Linux distributions (Red Hat Bugzilla).