PT-2007-1822 · Zonealarm+1 · Zonealarm+2

Published 2007-01-19 · Updated 2018-10-16 · CVE-2007-0351

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP and Windows Server 2003

Description: The issue is related to improper handling of user logoff, which could allow local users to gain the privileges of a previous system user. This might be related to user profile unload failure. It is unclear whether this is a problem with Windows itself or an interaction with another product, possibly involving ZoneAlarm's inability to terminate processes when it cannot prompt the user.

Recommendations: For Microsoft Windows XP and Windows Server 2003, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0351

Affected Products

Windows Xp

Windows Server 2003

Zonealarm

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-0351 · Security Note
• http://securityfocus.com/archive/1/457167/100/0/threaded · Note
• http://securityfocus.com/archive/1/459838/100/0/threaded · Note
• http://securityfocus.com/archive/1/457217/100/0/threaded · Note
• http://securityfocus.com/archive/1/457340/100/0/threaded · Note
• http://securityfocus.com/archive/1/457807/100/200/threaded · Note