Description
Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by "reading more than 8 bytes into an 8 byte long array".
References
- MDKSA-2006:040 vendor-advisory
- linux-kernel-cadriver-bo(43323) vdb-entry
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15
- ADV-2006-0035 vdb-entry
- 18216 third-party-advisory
- 16142 vdb-entry
- USN-244-1 vendor-advisory
- 18527 third-party-advisory