CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in the vfat filesystem implementation in the linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a vfat write operation on a filesystem with the utf8 mount option, which is not properly handled during utf-8 to utf-16 conversion. per https://access.redhat.com/security/cve/cve-2013-1773
"this issue affects the version of linux kernel as shipped with red hat enterprise linux 6 and red hat enterprise mrg 2. future kernel updates for red hat enterprise linux 6 and red hat enterprise mrg 2 may address this issue."
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-02-28
Last Modified Date: 2019-04-22
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Restriction of Operations within the Bounds of a Memory Buffer.
user
CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in the vfat filesystem implementation in the linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a vfat write operation on a filesystem with the utf8 mount option, which is not properly handled during utf-8 to utf-16 conversion. per https://access.redhat.com/security/cve/cve-2013-1773
"this issue affects the version of linux kernel as shipped with red hat enterprise linux 6 and red hat enterprise mrg 2. future kernel updates for red hat enterprise linux 6 and red hat enterprise mrg 2 may address this issue."
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-02-28
Last Modified Date: 2019-04-22
assistant