Broadcom BCM4325 and BCM4329 Wireless Chipset Out of Bound Read Denial of Service Vulnerability

Bugtraq ID:	56184
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-2619
Remote:	Yes
Local:	No
Published:	Oct 23 2012 12:00AM
Updated:	Jan 28 2013 09:10PM
Credit:	Andres Blanco and Matias Eissler
Vulnerable:	Apple Apple TV 5.0
Not Vulnerable:

Broadcom BCM4325 and BCM4329 Wireless Chipset Out of Bound Read Denial of Service Vulnerability

Broadcom BCM4325 and BCM4329 Wireless Chipsets are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to crash, denying service to legitimate users. Due to the nature of this issue, sensitive information may be obtained.

The following Chipsets are vulnerable:

BCM4325
BCM4329

Broadcom BCM4325 and BCM4329 Wireless Chipset Out of Bound Read Denial of Service Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/56184.py

Broadcom BCM4325 and BCM4329 Wireless Chipset Out of Bound Read Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Broadcom BCM4325 and BCM4329 Wireless Chipset Out of Bound Read Denial of Service Vulnerability

References:

• Broadcom Wireless LAN Web Site (Broadcom)