PT-2007-3425 · Check Point Zone · Zonealarm Pro

Published 2007-04-18 · Updated 2018-10-16 · CVE-2007-2083

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Zone Labs ZoneAlarm Pro versions prior to 7.0.302.000

Description The issue allows local users to cause a denial of service (system crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateKey and (2) NtDeleteFile functions, due to the vsdatant.sys component not validating certain arguments before being passed to hooked SSDT function handlers.

Recommendations For versions prior to 7.0.302.000, update to version 7.0.302.000 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2007-2083

Affected Products

Zonealarm Pro

References · 7

• 🔥 https://exploit-db.com/exploits/29860 · Exploit
• http://matousec.com/info/advisories/ZoneAlarm-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2083 · Security Note
• http://securityreason.com/securityalert/2591 · Note
• http://securityfocus.com/archive/1/465868/100/0/threaded · Note
• http://osvdb.org/35239 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33664 · Note