CVE-2014-3677 – shim: memory corruption flaw when processing Machine Owner Keys (MOKs)

https://notcve.org/view.php?id=CVE-2014-3677

22 Oct 2014 — Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption. Vulnerabilidad no especificada en Shim podría permitir a atacantes ejecutar código arbitrario a través de una lista MOK manipulada, lo que provoca la corrupción de la memoria. An out-of-bounds memory write flaw was found in the way shim processed certain Machine Owner Keys (MOKs). A local attacker could potentially use this flaw to execute arbitrary code on the system. ... • http://rhn.redhat.com/errata/RHSA-2014-1801.html • CWE-787: Out-of-bounds Write •