CVE-2007-2057

CRITIQUE 10.0CVE-2007-2057 · Published 18/04/2007 · updated 16/06/2026

En bref

CVE-2007-2057 est une vulnérabilité CRITIQUE (CVSS 10.0) touchant airodump-ng (aircrack-ng).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 19.4%, plus élevée que 97.4% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
airodump-ng aircrack-ng	`= 0.7`	No fix yet

Description

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets.

References

osvdb.org/34931
secunia.com/advisories/24880 · Vendor Advisory
secunia.com/advisories/24964
secunia.com/advisories/24982
security.gentoo.org/glsa/glsa-200704-16.xml
securityreason.com/securityalert/2584
debian.org/security/2007/dsa-1280
kb.cert.org/vuls/id/349828 · US Government Resource
nop-art.net/advisories/airodump-ng.txt · Exploit
securityfocus.com/archive/1/465552/100/0/threaded
securityfocus.com/bid/23467
vupen.com/english/advisories/2007/1379
exchange.xforce.ibmcloud.com/vulnerabilities/33626

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free