NetSight
medium6.9

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel th…

Impact

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.37 before 3.2.63
from 3.3 before 3.4.104
from 3.5 before 3.10.56
from 3.11 before 3.12.31
from 3.13 before 3.14.20
from 3.15 before 3.16.4

Weakness classification

References