CVE-2007-5093
- State
- Published
- Severity
- Not scored
- Published
- Sep 26, 2007
- Updated
- Aug 7, 2024
- Reserved
- Sep 26, 2007
Description
The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 "relies on user space to close the device," which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2008:0275vendor-advisory
- 30294third-party-advisory
- 20070902 Oops in pwc v4l drivermailing-list
- 20070903 Re: Oops in pwc v4l drivermailing-list
- RHSA-2008:0972vendor-advisory
- 28706third-party-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6
- 26994third-party-advisory
- DSA-1504vendor-advisory
- MDVSA-2008:008vendor-advisory
- oval:org.mitre.oval:def:10494vdb-entrysignature
- USN-558-1vendor-advisory
- DSA-1381vendor-advisory
- MDVSA-2008:105vendor-advisory
- DSA-1503vendor-advisory
- USN-574-1vendor-advisory
- 29058third-party-advisory
- 28971third-party-advisory
- 25504vdb-entry
- 28170third-party-advisory
- 32799third-party-advisory
- USN-578-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.