PT-2006-6549 · Broadcom+1 · Broadcom Bcmwl5.Sys+1

Johnny Cache · Published 2006-11-14 · Updated 2017-07-20 · CVE-2006-5882

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Broadcom BCMWL5.SYS wireless device driver version 3.50.21.10 Cisco Linksys WPC300N Wireless-N Notebook Adapter versions prior to 4.100.15.5

Description The issue is a stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver. It allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field.

Recommendations For Broadcom BCMWL5.SYS wireless device driver version 3.50.21.10, update to a newer version to mitigate the risk. For Cisco Linksys WPC300N Wireless-N Notebook Adapter versions prior to 4.100.15.5, update to version 4.100.15.5 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-5882

Affected Products

Broadcom Bcmwl5.Sys

Linksys Wpc300N Wireless-N Notebook Adapter

References · 11

• 🔥 https://exploit-db.com/exploits/2770 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5882 · Security Note
• http://kb.cert.org/vuls/id/MAPG-6VGNHW · Patch
• http://projects.info-pull.com/mokb/MOKB-11-11-2006.html · Note
• http://kb.cert.org/vuls/id/209376 · Note
• http://linksys.com/servlet/Satellite?c=L_Download_C2&childpagename=US%2FLayout&cid=1115417109934&packedargs=sku%3D1144763513196&pagename=Linksys%2FCommon%2FVisitorWrapper · Note
• http://vupen.com/english/advisories/2006/4459 · Note
• http://securitytracker.com/id?1017212 · Note
• http://secunia.com/advisories/22831 · Note
• http://vupen.com/english/advisories/2006/4460 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30202 · Note