CVE-2004-2731
- State
- Published
- Severity
- Not scored
- Published
- Oct 9, 2007
- Updated
- Aug 8, 2024
- Reserved
- Oct 8, 2007
Description
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 11981third-party-advisory
- 7345vdb-entry
- 1010617vdb-entry
- 8363vdb-entry
- 20040629 linux kernel Sbus PROM driver multiple integer overflowsmailing-list
- DSA-1503vendor-advisory
- 29058third-party-advisory
- http://www.securiteam.com/unixfocus/5GP0515DFW.html
- 10632vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.