NetSight
IP …
medium6.8Public exploit code

CVE-2010-1159

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1)…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value in an EAPOL packet or (2) long EAPOL packet.

Affected products

VendorProductAffected versions
Aircrack-NgAircrack-Ng
through 1.0
Versions 0.1, 0.2, 0.2.1, 0.3, 0.4
GentooLinux
All versions

Weakness classification

CWE-119

References