CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 4.7
CWE Name:  Resource Management Errors
Summary: the console selection feature in the linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the utf-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte utf-8 characters, which triggers an "off-by-two memory error." note: it is not clear whether this issue crosses privilege boundaries.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2009-03-23
Last Modified Date: 2016-05-31