Intel 2200BG W29N51.SYS Driver Beacon Frame Race Condition

Breno Silva Pinto has reported a vulnerability in Intel 2200BG drivers, which potentially can be exploited by malicious people to compromise a vulnerable system.


The vulnerability is caused due to a race condition when W29N51.SYS handles multiple beacon frames. This can be exploited to overwrite certain kernel memory structures via sending multiple specially crafted beacon frames to the wireless card.


Successful exploitation may allow execution of arbitrary code.


The vulnerability is reported in version 9.0.3.9. Other versions may also be affected.


Solution: Turn off the wireless card when not in use.
http://secunia.com/advisories/23338/

Leave a Reply