CVE-2007-4573
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 0.8%
from disclosure to weaponsame day
Published on NVDSep 24
1st PoCSep 21
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64 architecture, does not zero extend the eax register after the 32bit entry path to ptrace is used, which might allow local users to gain privileges by triggering an out-of-bounds access to the system call table using the %RAX register.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/30604exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/4460⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://fedoranews.org/updates/FEDORA-2007-229.shtmlhttp://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35.3http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.htmlhttp://lkml.org/lkml/2007/9/21/512http://lkml.org/lkml/2007/9/21/513http://marc.info/?l=full-disclosure&m=119062587407908&w=2http://secunia.com/advisories/26917http://secunia.com/advisories/26919http://secunia.com/advisories/26934http://secunia.com/advisories/26953http://secunia.com/advisories/26955http://secunia.com/advisories/26978