CVE-2009-0282

2009-01-2718:30:00

CWE-189

mitre

web.nvd.nist.gov

cve-2009-0282

ralink technology

usb

wireless adapter

rt73

denial of service

crash

arbitrary code

integer overflow

vulnerability

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.039

Percentile

92.0%

JSON

Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error.

Affected configurations

Nvd

Node

ralinktechrt73Match3.08

AND

microsoftwindows_2000Match-

VendorProductVersionCPE
ralinktechrt733.08cpe:2.3:h:ralinktech:rt73:3.08:*:*:*:*:*:*:*
microsoftwindows_2000-cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*