PT-2008-1999 · Unknown · Core Force

Published 2008-01-18 · Updated 2018-10-15 · CVE-2008-0366

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CORE FORCE versions prior to 0.95.172

Description The issue is related to the improper validation of arguments to SSDT hook handler functions in the Registry module. This can be exploited by local users to cause a denial of service, resulting in a system crash, and potentially execute arbitrary code in the kernel context by providing crafted arguments.

Recommendations For versions prior to 0.95.172, update to version 0.95.172 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSDT hook handler functions in the Registry module to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0366

Affected Products

Core Force

References · 8

• 🔥 http://securityfocus.com/bid/27341 · Exploit
• http://coresecurity.com/?action=item&id=2025 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-0366 · Security Note
• http://securitytracker.com/id?1019245 · Note
• http://vupen.com/english/advisories/2008/0242 · Note
• http://securityfocus.com/archive/1/486513/100/0/threaded · Note
• http://securityreason.com/securityalert/3555 · Note
• http://force.coresecurity.com/index.php?module=articles&func=display&aid=32 · Note