Description
The qcamvc_video_init function in qcamvc.c in De Marchi Daniele QuickCam VC Linux device driver (aka quickcam-vc) 1.0.9 and earlier does not properly check a boundary, triggering memory corruption, which might allow attackers to execute arbitrary code via a crafted QuickCam object.
References
- 21815 vdb-entry
- 20061229 QuickCam linux device driver allows arbitrary code execution mailing-list
- quickcam-driver-code-execution(31211) vdb-entry