Lucene search

K
nvd[email protected]NVD:CVE-2014-3181
HistorySep 28, 2014 - 10:55 a.m.

CVE-2014-3181

2014-09-2810:55:10
CWE-119
web.nvd.nist.gov
7

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

35.4%

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.6.373.2.63
OR
linuxlinux_kernelRange3.33.4.104
OR
linuxlinux_kernelRange3.53.10.56
OR
linuxlinux_kernelRange3.113.12.31
OR
linuxlinux_kernelRange3.133.14.20
OR
linuxlinux_kernelRange3.153.16.4

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

35.4%