CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: the load_mixer_volumes function in sound/oss/soundcard.c in the oss sound subsystem in the linux kernel before 2.6.37 incorrectly expects that a certain name field ends with a '\0' character, which allows local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a sound_mixer_setlevels ioctl call.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2011-01-13
Last Modified Date: 2012-03-19