CVE-2003-1309 The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certa...
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 3.7.202 | No fix listed |
| zonelabs zonealarm | = 3.7.211 | No fix listed |
References
- 20030805 Local ZoneAlarm Firewall (probably all versions - tested on v3.1) exploit mailing-list vendor-advisory
- download.zonelabs.com
- sec-labs.hack.pl
- sec-labs.hack.pl
- 9459 patch third-party-advisory vendor-advisory
- 2375 patch vdb-entry vendor-advisory
- 4362 patch vdb-entry vendor-advisory
- 8342 vdb-entry vendor-advisory
- device-driver-gain-privileges(12824) vdb-entry