Buffer overflow in Freebsd

CVE-2009-1041

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.

Vulnerability class: Buffer Overflow

EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 7.0, 7.1, 7.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secteam@freebsd.org (x_refsource_FREEBSD, Exploit, vendor-advisory)
secteam@freebsd.org (exploit, x_refsource_EXPLOIT-DB)
secteam@freebsd.org (vdb-entry, x_refsource_SECTRACK)
secteam@freebsd.org (vdb-entry, x_refsource_XF)
secteam@freebsd.org (vdb-entry, x_refsource_BID)