1. CVE-Search
  2. CVE-2007-2467
ID CVE-2007-2467
Summary ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access.
References
Vulnerable Configurations
  • cpe:2.3:a:zonelabs:zonealarm:6.1.744.001:*:pro:*:*:*:*:*
    cpe:2.3:a:zonelabs:zonealarm:6.1.744.001:*:pro:*:*:*:*:*
  • cpe:2.3:a:zonelabs:zonealarm:6.5.737.000:*:pro:*:*:*:*:*
    cpe:2.3:a:zonelabs:zonealarm:6.5.737.000:*:pro:*:*:*:*:*
CVSS
Base: 4.9 (as of 16-10-2018 - 16:44)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 23734
bugtraq 20070501 ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability
misc http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-validation-of-vsdatant-driver-input-buffer.php
osvdb 35240
secunia 25064
vupen ADV-2007-1608
xf zonealarm-vsdatant-inputbuffer-dos(34028)
Last major update 16-10-2018 - 16:44
Published 02-05-2007 - 22:19
Last modified 16-10-2018 - 16:44
Back to Top