Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.
Exploitability
AV:LAC:MAu:NImpact
C:PI:PA:P4.4/AV:L/AC:M/Au:N/C:P/I:P/A:P