CVE-2006-2935: Buffer Overflow
The dvdreadbca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2935?
CVE-2006-2935 is considered a moderate severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2006-2935?
To fix CVE-2006-2935, upgrade to a patched version of the Linux kernel that addresses this buffer overflow issue.
What systems are affected by CVE-2006-2935?
CVE-2006-2935 affects Linux kernel 2.2.16 and later versions, as well as specific Ubuntu and Debian distributions.
Can CVE-2006-2935 be exploited locally?
Yes, CVE-2006-2935 can be exploited locally by users through a maliciously crafted USB storage device.
What type of vulnerability is CVE-2006-2935?
CVE-2006-2935 is a buffer overflow vulnerability that can lead to arbitrary code execution.