imPC@ndo IT

Tracker / CVE-2014-3181

CVE-2014-3181

Medium 6.9

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.

Affected products and versions

linux linux_kernel · 2.6.37 → 3.2.63
linux linux_kernel · 3.11 → 3.12.31
linux linux_kernel · 3.13 → 3.14.20
linux linux_kernel · 3.15 → 3.16.4
linux linux_kernel · 3.3 → 3.4.104
linux linux_kernel · 3.5 → 3.10.56

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References