Code Execution Bug In Broadcom Wi-Fi Driver

Posted by Zonk on Saturday November 11, 2006 @11:10PM from the catch-that-insect dept.

2U*U2 writes to mention an EWeek article about an entry in the Month of Kernel Bugs. John Ellch has discovered a critical vulnerability in the Broadcom wireless driver: a driver used in machines from HP, Dell, Gateway, and eMachines. From the article: "[The bug] is a stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver that could be exploited by attackers to take complete control of a Wi-Fi-enabled laptop. The vulnerability is caused by improper handling of 802.11 probe responses containing a long SSID field and can lead to arbitrary kernel-mode code execution. The volunteer ZERT (Zero Day Emergency Response Team) warns that the flaw could be exploited wirelessly if a vulnerable machine is within range of the attacker."

1 of 157 comments (clear)

Min score:

Reason:

Sort:

QUARANTINE by LiquidCoooled · 2006-11-11 23:11 · Score: 0, Offtopic

Is this the same airborne virus that is attacking the skinjobs in Battlestar galactica?
If its attacking base stations, maybe we can get rid of the rest of the skinjobs and toasters while we are at it.

--
liqbase :: faster than paper