NetSight
IP …
medium6.2Public exploit code

CVE-2010-2963

drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the d…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.36
FedoraprojectFedora
Version 13
OpensuseOpensuse
Versions 11.2, 11.3
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
DebianDebian Linux
Version 5.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04, 10.10

Weakness classification

CWE-20

References