Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2004-0657 | Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T00:24:26.976Z
Reserved: 2004-07-12T00:00:00.000Z
Link: CVE-2004-0658
No data.
Status : Deferred
Published: 2004-08-06T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2004-0658
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD