CVE-2007-0686 Memory corruption in n/a

High 7.1 Published 3 Feb 2007 Updated 7 Aug 2024

Remote attackers can crash the system via crafted disassociation packets due to memory corruption in the Intel 2200BG wireless driver.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2007-0686?

CVE-2007-0686 is a high-severity memory corruption vulnerability in n/a, published on 3 Feb 2007. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of service (system crash) via crafted disassociation packets, which triggers memory corruption of "internal kernel structures," a different vulnerability than CVE-2006-6651. NOTE: this issue might overlap CVE-2006-3992.

Which versions are affected by CVE-2007-0686?

It affects 1 product.

Products include Intel 2200bg Proset Wireless.

How do I fix CVE-2007-0686?

No fix has been published for CVE-2007-0686 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2007-0686 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-0686 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-wwqj-cvrv-7w8x.