CVE-2008-3496
6.5 Medium
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.007 Low
EPSS
Percentile
80.6%
Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c in uvcvideo in the video4linux (V4L) implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | lt | 2.6.26.1 |
References
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
lkml.org/lkml/2008/7/30/655
secunia.com/advisories/31982
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1
www.mandriva.com/security/advisories?name=MDVSA-2008:223
www.securityfocus.com/bid/30514
exchange.xforce.ibmcloud.com/vulnerabilities/44184
Social References
More
Related
6.5 Medium
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.007 Low
EPSS
Percentile
80.6%