CVE

Id
28396  
CVE No.
CVE-2007-5039  
Status
Candidate  
Description
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295104 28396 CVE-2007-5039 BUGTRAQ:20070918 Plague in (security) software drivers & BSDOhook utility  View
295105 28396 CVE-2007-5039 URL:http://www.securityfocus.com/archive/1/archive/1/479830/100/0/threaded  View
295106 28396 CVE-2007-5039 MISC:http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php  View
295107 28396 CVE-2007-5039 MISC:http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php  View
295108 28396 CVE-2007-5039 OSVDB:45895  View
295109 28396 CVE-2007-5039 URL:http://osvdb.org/45895  View
295110 28396 CVE-2007-5039 SREASON:3161  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53981 JVNDB-2007-002673 G DATA InternetSecurity における権限を取得される脆弱性 G DATA InternetSecurity は、System Service Descriptor Table (SSDT) 関数ハンドラへの特定のパラメータを適切に検証しないため、サービス運用妨害 (クラッシュ) 状態にされる、および権限を取得される脆弱性が存在します。 CVE-2007-5041 28396 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002673.html  View