<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1046" target="_blank">CVE</a>)</em> : The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an &quot;an off-by-two memory error.&quot; NOTE: it is not clear whether this issue crosses privilege boundaries.

• CVE ID: 2009-1046 (see also: NVD)
• Bugtraq ID: 33672
• Secunia Advisory ID: 34917 34981 35121 36368
• Vendor Specific News/Changelog Entry: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.28.y.git;a=commit;h=8255fc826e58c0a59711029e01db9fcdc06ba211
  http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00007.html
  http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.4
• Mail List Post: http://lists.openwall.net/linux-kernel/2009/01/30/333
  http://lists.openwall.net/linux-kernel/2009/02/02/364
  http://marc.info/?l=oss-security&m=123446786405362&w=2
  http://marc.info/?l=oss-security&m=123446917808229&w=2
  http://marc.info/?l=oss-security&m=123447020310091&w=2
  http://seclists.org/bugtraq/2012/Nov/119
• Packet Storm: http://packetstormsecurity.org/files/118507/Symantec-Messaging-Gateway-Backdoor-Privilege-Escalation.html
• Other Advisory URL: http://www.debian.org/security/2009/dsa-1787
  http://www.debian.org/security/2009/dsa-1800
  http://www.openwall.com/lists/oss-security/2009/02/12/10
  http://www.openwall.com/lists/oss-security/2009/02/12/11
  http://www.openwall.com/lists/oss-security/2009/02/12/9
  http://www.ubuntu.com/usn/usn-751-1
• RedHat RHSA: RHSA-2009:0451

Unknown or Incomplete