CVE-2011-1777

CVE-2011-1777 describes multiple buffer overflow vulnerabilities within the libarchive library, specifically affecting the heap_add_entry and relocate_dir functions in archive_read_support_format_iso9660.c. These flaws, present in libarchive through version 2.8.5, allow remote attackers to exploit systems running FreeBSD and other products utilizing libarchive. The vulnerability carries a CVSS score of 6.8, indicating a medium severity. An attacker could trigger these overflows by providing a specially crafted ISO9660 image, potentially leading to a denial of service (application crash) or, in more severe cases, arbitrary code execution. The attack requires medium complexity due to the need for a crafted file. Despite its potential impact, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.