Laurent Butti has reported a vulnerability in the D-Link DWL-G650+ wireless driver, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.

The vulnerability is caused due to an error within the handling of beacon frames containing an overly long TIM information element and can be exploited to cause a buffer overflow via a specially crafted packet.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version 6.0.0.18 (Rev. A1). Other versions may also be affected.

Solution
Turn off the wireless card when not in use.

Provided and/or discovered by
Laurent Butti

Original Advisory
http://www.blackhat.com/presentations/bh-europe-07/Butti/Presentation/bh-eu-07-Butti.pdf

Deep Links
Links available to Secunia VIM customers