Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kismac | Kismac | 0.1a (including) | 0.1a (including) |
| Kismac | Kismac | 0.1b (including) | 0.1b (including) |
| Kismac | Kismac | 0.1c (including) | 0.1c (including) |
| Kismac | Kismac | 0.2a (including) | 0.2a (including) |
| Kismac | Kismac | 0.5d (including) | 0.5d (including) |
| Kismac | Kismac | 0.5d4 (including) | 0.5d4 (including) |
| Kismac | Kismac | 0.10a (including) | 0.10a (including) |
| Kismac | Kismac | 0.11a (including) | 0.11a (including) |
| Kismac | Kismac | 0.12a (including) | 0.12a (including) |