CVE - CVE-2007-3851

CVE-ID
CVE-2007-3851	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:25263 URL:http://www.securityfocus.com/bid/25263 MISC:26389 URL:http://secunia.com/advisories/26389 MISC:26450 URL:http://secunia.com/advisories/26450 MISC:26500 URL:http://secunia.com/advisories/26500 MISC:26643 URL:http://secunia.com/advisories/26643 MISC:26664 URL:http://secunia.com/advisories/26664 MISC:26760 URL:http://secunia.com/advisories/26760 MISC:27227 URL:http://secunia.com/advisories/27227 MISC:ADV-2007-2854 URL:~~http://www.vupen.com/english/advisories/2007/2854~~ (Obsolete source) MISC:DSA-1356 URL:http://www.debian.org/security/2007/dsa-1356 MISC:MDVSA-2008:105 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:105~~ (Obsolete source) MISC:RHSA-2007:0705 URL:http://www.redhat.com/support/errata/RHSA-2007-0705.html MISC:SUSE-SA:2007:051 URL:http://www.novell.com/linux/security/advisories/2007_51_kernel.html MISC:SUSE-SA:2007:053 URL:http://www.novell.com/linux/security/advisories/2007_53_kernel.html MISC:USN-509-1 URL:http://www.ubuntu.com/usn/usn-509-1 MISC:USN-510-1 URL:http://www.ubuntu.com/usn/usn-510-1 MISC:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 URL:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 MISC:https://issues.rpath.com/browse/RPL-1620 URL:https://issues.rpath.com/browse/RPL-1620 MISC:oval:org.mitre.oval:def:11196 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11196
Assigning CNA
Red Hat, Inc.
Date Record Created
20070718	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070718)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)