CVE-2009-0787

CVE-2009-0787 describes an out-of-bounds read vulnerability in the eCryptfs functionality of the Linux kernel versions 2.6.28 through 2.6.28.9. Specifically, the ecryptfs_write_metadata_to_contents function uses an incorrect size when writing kernel memory to an eCryptfs file header. This flaw allows local users to obtain portions of kernel memory. The vulnerability has a CVSS score of 4.9 (Medium), indicating a local attack vector with low complexity and no authentication required, leading to a complete compromise of confidentiality. There is no impact on integrity or availability. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness and attention to this specific CVE.