漏洞信息详情
MSM摄像头驱动基于栈的缓冲区溢出漏洞
- CNNVD编号:CNNVD-201310-658
- 危害等级: 中危
- CVE编号: CVE-2013-4738
- 漏洞类型: 缓冲区溢出
- 发布时间: 2013-10-15
- 威胁类型: 本地
- 更新时间: 2014-02-08
- 厂 商: codeaurora
- 漏洞来源: Jonathan Salwan of...
漏洞简介
MSM camera driver for the Linux kernel是一个基于Linux内核中的高通平台摄像头驱动项目。
Qualcomm Innovation Center (QuIC) CMS.zone.ci/e/tags/htag.php?tag=Android target=_blank class=infotextkey>Android contributions for MSM设备和其他产品中使用的MSM摄像头驱动中存在基于栈的缓冲区溢出漏洞。当处理参数传递到VIDIOC_MSM_CPP_DEQUEUE_STREAM_BUFF_INFO或VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO ioctl subdev处理程序时,攻击者可利用该漏洞获取提升的权限。
漏洞公告
目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接:
https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-and-memory-disclosure-camera-driver-cve-2013-4738-cve-2013-4739
参考网址
来源: www.codeaurora.org
链接:https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-and-memory-disclosure-camera-driver-cve-2013-4748-cve-2013-4739
来源: MLIST
名称: [oss-security] 20131015 Report - Stack-based buffer overflow and memory disclosure in camera driver (CVE-2013-4748 CVE-2013-4739)
链接:http://www.openwall.com/lists/oss-security/2013/10/15/4
来源: BID
名称: 63263
链接:http://www.securityfocus.com/bid/63263
受影响实体
- Codeaurora CMS.zone.ci/e/tags/htag.php?tag=Android target=_blank class=infotextkey>Android-Msm:2.6.29
补丁
- c9c81836ee44db9974007d34cf2aaeb1a51a8d45
- 28385b9c3054c91dca1aa194ffa750550c50f3ce
- 8604847927f952cc8e773b97eca24e1060a570f2
评论