Vulnerability Description
Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ralinktech | Rt73 | 3.08 |
| Microsoft | Windows 2000 | - |
Related Weaknesses (CWE)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995
- http://secunia.com/advisories/33592Vendor Advisory
- http://secunia.com/advisories/33699Vendor Advisory
- http://secunia.com/advisories/35743Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200907-08.xml
- http://www.debian.org/security/2009/dsa-1712
- http://www.debian.org/security/2009/dsa-1713
- http://www.debian.org/security/2009/dsa-1714
- http://www.securityfocus.com/archive/1/500168/100/0/threaded
- http://www.securityfocus.com/bid/33340
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512995
- http://secunia.com/advisories/33592Vendor Advisory
- http://secunia.com/advisories/33699Vendor Advisory
- http://secunia.com/advisories/35743Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200907-08.xml
FAQ
What is CVE-2009-0282?
CVE-2009-0282 is a vulnerability with a CVSS score of 9.3 (HIGH). Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denia...
How severe is CVE-2009-0282?
CVE-2009-0282 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-0282?
Check the references section above for vendor advisories and patch information. Affected products include: Ralinktech Rt73, Microsoft Windows 2000.