CVE-2007-0085 describes an unspecified local privilege escalation vulnerability in the VGA graphics driver (vga_pci.c) of OpenBSD 3.9 and 4.0. This flaw occurs when the kernel is compiled with the PCIAGP option and a non-AGP device is in use, potentially involving a NULL pointer dereference in agp_ioctl. With a CVSS score of 6.0, this vulnerability is rated as medium severity, requiring local access and high attack complexity, but leading to complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 80/100 indicates significant potential impact. While not actively exploited in the wild (no KEV entry), an exploit (EDB-3094) is publicly available on ExploitDB. Despite this, there is minimal community discussion or media coverage surrounding this older vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.9CPE matchmatch criteria | cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:* | ||
4.0CPE matchmatch criteria | cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:H/Au:S/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.