CVE-2007-0085
First published: Fri Jan 05 2007(Updated: )
Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP device is being used, allows local users to gain privileges via unspecified vectors, possibly related to agp_ioctl NULL pointer reference.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenBSD | =3.9 | |
| OpenBSD | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://ilja.netric.org/files/Unusual%20bugs%2023c3.pdf
- http://www.openbsd.org/errata39.html#agp
- http://www.openbsd.org/errata.html#agp
- http://securitytracker.com/id?1017468
- http://secunia.com/advisories/23608
- http://www.osvdb.org/32574
- http://www.vupen.com/english/advisories/2007/0043
- http://marc.info/?l=openbsd-cvs&m=116785923301416&w=2
- http://marc.info/?l=openbsd-cvs&m=116781980706409&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31276
Frequently Asked Questions
What is the severity of CVE-2007-0085?
The severity of CVE-2007-0085 is considered high due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2007-0085?
To fix CVE-2007-0085, users should upgrade to the latest version of OpenBSD that does not compile the kernel with the PCIAGP option when using a non-AGP device.
Which versions of OpenBSD are affected by CVE-2007-0085?
CVE-2007-0085 affects OpenBSD versions 3.9 and 4.0 when the kernel is compiled with the PCIAGP option.
What kind of devices are involved in CVE-2007-0085?
CVE-2007-0085 is related to the inclusion of non-AGP devices in a system where the VGA graphics driver is improperly handling them.
Can CVE-2007-0085 be exploited remotely?
CVE-2007-0085 is a local privilege escalation vulnerability and cannot be exploited remotely.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/openbsd
- canonical/openbsd
- version/openbsd/3.9
- version/openbsd/4.0