CVE Catalog
CVE-2016-2324
CriticalSummary
Integer overflow in Git before version 2.7.4 allows remote attackers to execute arbitrary code via (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, posing a serious threat to the integrity and security of the system.
Recommendation
It is recommended to update Git to version 2.7.4 or later to mitigate this vulnerability.
Original NVD description (English source)
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.