PT-2007-4046 · Microsoft+1 · Windows+1

Publicado 2007-05-16 · Atualizado 2018-10-16 · CVE-2007-2730

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm Pro versions prior to 6.5.737.000

Description The issue allows local users to bypass firewall rules or gain privileges by calling certain Microsoft Windows API functions in the NT kernel 5.0 and greater, via a modified identifier that is one, two, or three greater than the canonical identifier.

Recommendations For versions prior to 6.5.737.000, update to version 6.5.737.000 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2730

Produtos afetados

Windows

Zonealarm Pro

Referências · 5

• http://securityreason.com/securityalert/2714 · Nota
• http://osvdb.org/37383 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2730 · Nota de Segurança
• http://matousec.com/info/advisories/Bypassing-PWF-HIPS-open-process-control-with-uncommon-identifier.php · Aviso do Fabricante
• http://securityfocus.com/archive/1/468643/100/0/threaded · Nota