CVE-2004-1038 | BDVDB-2026-7380 Detail

Description#

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12004-11-16Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.