A vulnerability has been reported in Ralink Technology Wireless Drivers, which can be exploited to cause a DoS (Denial of Service) or compromise a vulnerable system.

The vulnerability is caused due to a signedness error in the processing of Probe Request packets, which can be exploited to cause a crash or potentially execute arbitrary code via a "Probe Request" packet containing a specially crafted SSID.

Successful exploitation requires that the wireless card runs in "ad hoc" mode.

The vulnerability is reported in RT73 version 3.08 on Windows 2000. Other versions may also be affected.

Solution
Do not use the "ad hoc" mode.

Provided and/or discovered by
Aviv

Changelog
Further details available in Customer Area

Original Advisory
http://archives.neohapsis.com/archives/bugtraq/2009-01/0167.html

Deep Links
Links available in Customer Area