CVE-2009-0282 json
Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt250…
published 2009-01-27 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-0287
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.8%
- EPSS 5.8% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error.
Exploit prediction
5.83% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-189 Numeric Errors
References
-
debian.org
/security/2009/dsa-1714
vendor-advisory
-
debian.org
/security/2009/dsa-1712
vendor-advisory
-
debian.org
/security/2009/dsa-1713
vendor-advisory
-
security.gentoo.org
/glsa/glsa-200907-08.xml
vendor-advisory
-
secunia.com
/advisories/33592
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/33699
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/35743
third-party-advisory, vendor-advisory
-
securityfocus.com
/archive/1/500168/100/0/threaded
mailing-list
-
securityfocus.com
/bid/33340
vdb-entry
- bugs.debian.org /cgi-bin/bugreport.cgi?bug=512995
Sources
- CVE List CVE-2009-0282
- NVD CVE-2009-0282
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.