Intel 2200BG 802.11 Malformed Disassociation Packets Denial Of Service Vulnerability

Bugtraq ID:	22260
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 26 2007 12:00AM
Updated:	Jan 29 2007 11:28PM
Credit:	Breno Silva Pinto is credited with discovering this issue.
Vulnerable:	Intel 2200BG (Mini-PCI) Driver 9.0.3.9
Not Vulnerable:

Intel 2200BG 802.11 Malformed Disassociation Packets Denial Of Service Vulnerability

Intel 2200BG driver is prone to a denial-of-service vulnerability because it fails to properly handle malformed network data.

A remote attacker can exploit this issue by crafting and submitting maliciously crafted network data to a victim.

Successful exploits may allow remote attackers to corrupt kernel memory and crash affected computers, effectively denying further service to legitimate users. Given the nature of this issue, code execution seems possible, but this has not been confirmed.

This issue was discovered in the Intel 2200 driver version 9.0.3.9; other versions may also be affected.

Intel 2200BG 802.11 Malformed Disassociation Packets Denial Of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/22260.c

Intel 2200BG 802.11 Malformed Disassociation Packets Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Intel 2200BG 802.11 Malformed Disassociation Packets Denial Of Service Vulnerability

References:

• Intel Homepage (Intel)
  
• Intel PRO/Wireless Network Connection (Intel)