Software Engineering Institute

The WG311ND5.SYS driver is a wireless (802.11g) device driver produced by Netgear that ships with the WG311v1 wireless adapter.

A heap buffer overflow vulnerability has been reported in the WG311ND5.SYS driver. This overflow occurs because the driver does not properly process the SSID information element part of 802.11 management frames. An attacker within radio range may be able to trigger the overflow by sending a specially-crafted 802.11 management frame to a vulnerable system. Since 802.11b and 802.11g management frames are not encrypted or authenticated, using wireless encryption (WEP/WPA) does not mitigate this vulnerability.

Note that Linux or Unix systems that use NDISWrapper or similar technologies to load the WG311ND5.SYS driver may also be vulnerable.

An attacker may be able to execute arbitrary code, or cause a denial-of-service condition.

We are currently unaware of a practical solution to this problem.

Disable wireless adapters

Disabling wireless adapters may reduce the chances of this vulnerability being exploited.