CVE

Id
27573  
CVE No.
CVE-2007-4216  
Status
Candidate  
Description
vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1) IOCTL 0x8400000F or (2) IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations.  
Phase
Assigned (20070808)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
283669 27573 CVE-2007-4216 IDEFENSE:20070820 Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities  View
283670 27573 CVE-2007-4216 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=585  View
283671 27573 CVE-2007-4216 BUGTRAQ:20070820 [Reversemode Advisory] CheckPoint ZoneLabs Vsdatant.sys multiple local privilege escalation vulnerabilities  View
283672 27573 CVE-2007-4216 URL:http://www.securityfocus.com/archive/1/archive/1/477155/100/0/threaded  View
283673 27573 CVE-2007-4216 MISC:http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=53  View
283674 27573 CVE-2007-4216 BID:25365  View
283675 27573 CVE-2007-4216 URL:http://www.securityfocus.com/bid/25365  View
283676 27573 CVE-2007-4216 BID:25377  View
283677 27573 CVE-2007-4216 URL:http://www.securityfocus.com/bid/25377  View
283678 27573 CVE-2007-4216 VUPEN:ADV-2007-2929  View
283679 27573 CVE-2007-4216 URL:http://www.vupen.com/english/advisories/2007/2929  View
283680 27573 CVE-2007-4216 SECTRACK:1018589  View
283681 27573 CVE-2007-4216 URL:http://securitytracker.com/id?1018589  View
283682 27573 CVE-2007-4216 SECUNIA:26513  View
283683 27573 CVE-2007-4216 URL:http://secunia.com/advisories/26513  View
283684 27573 CVE-2007-4216 XF:zonealarm-vsdatant-privilege-escalation(36107)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51959 JVNDB-2007-000622 Trend Micro ServerProtect の TCP ポート処理の不備による複数のバッファオーバーフローの脆弱性 Trend Micro ServerProtect には RPC リクエストの TCP ポート処理に不備が存在するために複数のバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4218 27573 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000622.html  View