CVE - CVE-2010-2963

CVE-ID
CVE-2010-2963	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:44242 URL:http://www.securityfocus.com/bid/44242 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3e645d6b485446c54c6745c5e2cf5c528fe4deec CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=642465 DEBIAN:DSA-2126 URL:http://www.debian.org/security/2010/dsa-2126 FEDORA:FEDORA-2010-18983 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html MANDRIVA:MDVSA-2010:257 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2010:257~~ (Obsolete source) MISC:http://www.outflux.net/blog/archives/2010/10/19/cve-2010-2963-v4l-compat-exploit/ SECTRACK:1024710 URL:http://www.securitytracker.com/id?1024710 SECUNIA:42745 URL:http://secunia.com/advisories/42745 SUSE:SUSE-SA:2010:053 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html SUSE:SUSE-SA:2010:057 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html UBUNTU:USN-1000-1 URL:http://www.ubuntu.com/usn/USN-1000-1 VUPEN:ADV-2010-3321 URL:~~http://www.vupen.com/english/advisories/2010/3321~~ (Obsolete source)
Assigning CNA
Canonical Ltd.
Date Record Created
20100804	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100804)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)