PT-2007-5409 · Check Point Zone · Zonealarm

Publicado 2007-08-21 · Atualizado 2018-10-15 · CVE-2007-4216

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Zone Labs ZoneAlarm version 6.5.737.0

Description The issue allows local users to gain privileges by sending a crafted Interrupt Request Packet (Irp) in a METHOD NEITHER IOCTL request. This can be achieved through either IOCTL 0x8400000F or IOCTL 0x84000013, allowing the overwrite of arbitrary memory locations.

Recommendations For version 6.5.737.0, update to version 7.0.362 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4216

Produtos afetados

Zonealarm

Referências · 10

• http://securitytracker.com/id?1018589 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=585 · Nota
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53 · Nota
• http://securityfocus.com/bid/25365 · Nota
• http://securityfocus.com/archive/1/477155/100/0/threaded · Nota
• http://secunia.com/advisories/26513 · Nota
• http://securityfocus.com/bid/25377 · Nota
• http://vupen.com/english/advisories/2007/2929 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-4216 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36107 · Nota