CVE-2006-6059 in the critical feed json
Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code vi…
published 2006-11-22 19 y ago modified 2026-06-16 4 mo ago also EUVD-2006-6042
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 18.9%
- EPSS 18.9% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (1) beacon or (2) probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a "memory corruption" error, but the associated exploit code suggests that it is a buffer overflow.
Timeline
- First public exploit (EDB-29096)
- Published
Exploit prediction
18.94% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-29096 Netgear MA521 Wireless Driver 5.148.724 - 'Beacon Probe' Remote Buffer Overflow remote, 2006-11-18
- securitytracker.com http://securitytracker.com/id?1017254 referenced PoC, tagged "exploit" by a source, unverified
- projects.info-pull.com http://projects.info-pull.com/mokb/MOKB-18-11-2006.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
securitytracker.com
/id?1017254
vdb-entry, exploit
-
projects.info-pull.com
/mokb/MOKB-18-11-2006.html
exploit, vendor-advisory
-
secunia.com
/advisories/23036
third-party-advisory, vendor-advisory
-
securityfocus.com
/bid/21175
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/30442
vdb-entry
-
kb.cert.org
/vuls/id/395496
third-party-advisory, us-government-resource
-
vupen.com
/english/advisories/2006/4604
vdb-entry
Sources
- CVE List CVE-2006-6059
- NVD CVE-2006-6059
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.