PT-2007-6732 · Riverbed+1 · Winpcap+2

CVE-2007-5756 · Publicado 2007-11-13 · Atualizado 2024-02-09

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WinPcap versions prior to 4.0.2

Description The issue is related to multiple array index errors in the bpf filter init function in NPF.SYS, which occurs when WinPcap is run in monitor mode. This can be exploited by local users via crafted IOCTL requests to gain privileges. The affected software is used in Wireshark and possibly other products.

Recommendations For versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the bpf filter init function until a patch is available. Avoid using the IOCTL requests that can trigger the array index errors in the affected function.

Correção

Improper Validation of Array Index

Enumeração de Fraquezas

CWE-129

Identificadores relacionados

CVE-2007-5756

Produtos afetados

Npf.Sys

Winpcap

Wireshark

Referências · 10

• http://securityfocus.com/bid/26409 · Nota
• http://vupen.com/english/advisories/2007/3835 · Nota
• http://frsirt.com/english/advisories/2007/3835 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625 · Nota
• http://securitytracker.com/id?1018935 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38433 · Nota
• http://xforce.iss.net/xforce/xfdb/38433 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5756 · Nota de Segurança
• http://winpcap.org/misc/changelog.htm · Nota
• http://secunia.com/advisories/27676 · Aviso do Fabricante