CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Numeric Errors
Summary: integer overflow in the fb_mmap function in drivers/video/fbmem.c in the linux kernel before 3.8.9, as used in a certain motorola build of android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the motochopper pwn program.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-04-13
Last Modified Date: 2016-12-31