CVE-2007-5093

CVE Details

Release Date:	2007-09-26
Impact:	Low	What is this?

Description

The disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22.6 relies on user space to close the device, which allows user-assisted local attackers to cause a denial of service (USB subsystem hang and CPU consumption in khubd) by not closing the device after the disconnect is invoked. NOTE: this rarely crosses privilege boundaries, unless the attacker can convince the victim to unplug the affected device.

See more information about CVE-2007-5093 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	4.0
Vector String:	AV:L/AC:H/Au:N/C:N/I:N/A:C
Version:	2.0
Attack Vector:	Local
Attack Complexity:	High
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	Complete

Errata information

Platform	Errata	Release Date
Oracle Enterprise Linux version 4 (kernel)	ELSA-2008-0972	2008-11-19
Oracle Enterprise Linux version 4 (ocfs2-2.6.9-78.0.8.0.1.EL)	ELSA-2008-0972	2008-11-19
Oracle Enterprise Linux version 4 (oracleasm-2.6.9-78.0.8.0.1.EL)	ELSA-2008-0972	2008-11-19
Oracle Linux version 5 (kernel)	ELSA-2008-0275	2008-05-20
Oracle Linux version 5 (ocfs2-2.6.18-53.1.21.0.1.el5)	ELSA-2008-0275	2008-05-20
Oracle Linux version 5 (oracleasm-2.6.18-53.1.21.0.1.el5)	ELSA-2008-0275	2008-05-20