CVE-2006-5882 Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebo

High 8.3 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2006-5882?

CVE-2006-5882 is a high-severity vulnerability in n/a, published on 14 Nov 2006.

Official description

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field.

Weakness: CWE-119

Which versions are affected by CVE-2006-5882?

It affects 2 products.

Products include Broadcom Bcmwl5.sys Wireless Device Driver, Linksys Wpc300n Wireless-N Notebook Adapter Driver.

How do I fix CVE-2006-5882?

No fix has been published for CVE-2006-5882 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-5882 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-5882 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-3fwg-8cpx-grjw.

Is CVE-2006-5882 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free