Vulnetix
Try Vulnetix Request Demo
CVE-2010-2963 PUBLISHED CVSS 6.199999809265137 MEDIUM

drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.

EPSS 0.11% · 28.6th percentile

Risk Scores

CVSS v2.0
6.199999809265137
EPSS Score
0.11%
28.6th percentile

Affected Products

VendorProductVersions
fedoraprojectfedora13
linuxlinux_kernel0
debiandebian_linux5.0
suselinux_enterprise_server11
opensuseopensuse11.2, 11.3
suselinux_enterprise_desktop11
canonicalubuntu_linux10.10, 6.06, 8.04
n/an/an/a

Timeline

References

Open in Interactive Console →