| ID |
CVE-2007-5474
|
| Sažetak |
The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long. |
| Reference |
|
| CVSS |
| Base: | 6.3 |
| Impact: | 6.9 |
| Exploitability: | 6.8 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
MEDIUM |
SINGLE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| NONE |
NONE |
COMPLETE |
|
| CVSS vektor |
AV:N/AC:M/Au:S/C:N/I:N/A:C |
| Zadnje važnije ažuriranje |
15-10-2018 - 21:45 |
| Objavljeno |
05-09-2008 - 16:08 |
