CVE-2007-0005

Published: Mar 10, 2007Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Affected (1)

Products: Omnikey.aaitg: Omnikey Cardman 4040

Omnikey.aaitg

1 product

Omnikey Cardman 4040

Configuration A

1 vulnerable · 10 platform

Vulnerable Software	Affected Versions
Omnikey.aaitg Omnikey Cardman 4040	All versions

Running on/with	Platform Versions
Linux Linux Kernel	Up to 2.6.21
Linux Linux Kernel	Version 2.6.21.1
Linux Linux Kernel	Version 2.6.21.2
Linux Linux Kernel	Version 2.6.21.3
Linux Linux Kernel	Version 2.6.21.4
Linux Linux Kernel	Version 2.6.21.5
Linux Linux Kernel	Version 2.6.21.6
Linux Linux Kernel	Version 2.6.21.7
Linux Linux Kernel	Version 2.6.21
Linux Linux Kernel	Version 2.6.21 rc1

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (48)

http://fedoranews.org/cms/node/2787

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2788

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc3

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/24436

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24518

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24777

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24901

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25078

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25691

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26133

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26139

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2007/dsa-1286

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:078

Source: secalert@redhat.com

http://www.osvdb.org/33023

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0099.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/462300/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/471457

Source: secalert@redhat.com

http://www.securityfocus.com/bid/22870

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-486-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-489-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0872

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32880

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1035

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11238

Source: secalert@redhat.com

http://fedoranews.org/cms/node/2787