peter bassill · operator
$ cve CVE-2006-6332 JSON

CVE-2006-6332 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 20.3% (pctl 97)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS20.3% — more likely to be exploited than 97% of all CVEs
On CISA KEVno
Public exploityes
Published2006-12-10
Last modified2026-06-16

Affected (1)

VendorProduct
madwifimadwifi

Public exploits

SourceTitleDate
exploit-dbMadwifi - SIOCGIWSCAN Buffer Overflow (Metasploit)2010-09-20
exploit-dbMadwifi 0.9.2.1 - WPA/RSN IE Remote Kernel Buffer Overflow2007-03-01
exploit-dbMadwifi < 0.9.2.1 - SIOCGIWSCAN Buffer Overflow (Metasploit)2006-12-08

References

→ the Explorer  ·  watch your stack  ·  NVD