|
LinuxSecurity.com: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information. (CVE-2008-3272)
Original Source: http://www.linuxsecurity.com/content/view/144448?rdf
Learn more about Mandriva: Subject: [Security Announce] [ MDVSA-2008:220-1 ] kernel |
