CVE-2005-0529

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.

Date published : 2005-02-24

http://marc.info/?l=bugtraq&m=111091402626556&w=2

http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930