UNSOLVED

maelztrom

updated

20 years ago

Closed

M

maelztrom

1 Message

0

5957

November 12th, 2006 15:00

Broadcom WiFi Driver Vulnerability

Information: http://www.eweek.com/article2/0,1895,2056023,00.asp

Summary: "
Computer security analysts are raising the alarm for a critical vulnerability in the Broadcom wireless driver embedded in PCs from HP, Dell, Gateway and

The vulnerability, which exposed as part of the MoKB (Month of Kernel Bugs) project, is a stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver that could be exploited by attackers to take complete control of a Wi-Fi-enabled laptop."


The question: When can I expect an appropriate driver patch from Dell?
  • Taft12

    2 Posts

    163

    0

    Posted November 12th, 2006 16:00

    Yikes! The Dell 1390 and 1490 wireless cards are Broadcoms aren't they? If so, this affects pretty much all Inspiron and Latitude notebooks. An important quesion
  • PetieNell

    1 Message

    163

    0

    Posted November 12th, 2006 18:00

    Dell reps, up the priority of this NOW! It sounds like Broadcom has already released the fixed driver to you. Do your OEM re-packaging stuff and get this out to us quickly. I live by my wireless, and would rather not be a walking target...

    If I have to buy another wireless card in the near term to avoid this just because you can't turn around your OEM drivers, what are the chances I go with the standard Dell wireless package next time I'm in a buying mood?
  • Joel.Moore

    1 Rookie

    •

    31 Posts

    163

    0

    Posted November 13th, 2006 19:00

    I have an Inspiron E1705 but I don't have this file in my C:\Windows\system32\drivers folder. Is that where it would be? The closest I have is "bcm4sbxp.sys" which is described as "Broadcom Corporation NDIS 5.1 ethernet driver" so hopefully I'm not vulnerable.

    I hope Dell is proactive on educating their customers about this.