PT-2007-5409 · Check Point Zone · Zonealarm

Published 2007-08-21 · Updated 2018-10-15 · CVE-2007-4216

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Zone Labs ZoneAlarm version 6.5.737.0

Description The issue allows local users to gain privileges by sending a crafted Interrupt Request Packet (Irp) in a METHOD NEITHER IOCTL request. This can be achieved through either IOCTL 0x8400000F or IOCTL 0x84000013, allowing the overwrite of arbitrary memory locations.

Recommendations For version 6.5.737.0, update to version 7.0.362 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4216

Affected Products

Zonealarm

References · 10

• http://vupen.com/english/advisories/2007/2929 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4216 · Security Note
• http://securitytracker.com/id?1018589 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=585 · Note
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53 · Note
• http://securityfocus.com/bid/25365 · Note
• http://securityfocus.com/archive/1/477155/100/0/threaded · Note
• http://secunia.com/advisories/26513 · Note
• http://securityfocus.com/bid/25377 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36107 · Note