CVE-2007-2467 ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant devic...
MediumCVSS 4.9
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zonelabs zonealarm | = 6.1.744.001 | No fix listed |
| zonelabs zonealarm | = 6.5.737.000 | No fix listed |
References
- 35240 vdb-entry
- 25064 third-party-advisory vendor-advisory
- www.matousec.com
- 20070501 ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability mailing-list
- 23734 vdb-entry
- ADV-2007-1608 vdb-entry
- zonealarm-vsdatant-inputbuffer-dos(34028) vdb-entry