What is CVE-2007-5475?

CVE-2007-5475 is a vulnerability in Linksys Wap4400n, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-11-12.

Is CVE-2007-5475 known to be exploited?

6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Linksys Wap4400n

CVE-2007-5475

Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chipset, and other products, allow remote 802.11-authenticated users to cause a denial of service (wireless access point crash) and possibly execute arbitrary code via an association request with long (1) rates, (2) extended rates, and unspecified other information elements.

Vulnerability class: Buffer Overflow

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

Affected products

Linksys Wap4400n — versions 1.2.17
Marvell 88w8361p-bem_chipset
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)

Frequently asked questions

What is CVE-2007-5475?: CVE-2007-5475 is a vulnerability in Linksys Wap4400n, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-11-12.
Is CVE-2007-5475 known to be exploited?: 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.