CVE-2007-3681 The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp)....
MediumCVSS 6.6
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winpcap | = 3.1 | No fix listed |
| winpcap | = 4.0 | No fix listed |
References
- 20070709 WinPcap NPF.SYS Local Privilege Escalation Vulnerability third-party-advisory
- 37889 vdb-entry
- 25982 patch third-party-advisory vendor-advisory
- 1018350 vdb-entry
- 20070709 WinPcap NPF.SYS Privilege Elevation Vulnerability mailing-list
- 20070710 Re: WinPcap NPF.SYS Privilege Elevation Vulnerability mailing-list
- 20070710 Re: Re: WinPcap NPF.SYS Privilege Elevation Vulnerability mailing-list
- 24829 patch vdb-entry
- ADV-2007-2468 vdb-entry
- www.winpcap.org
- winpcap-npf-code-execution(35309) vdb-entry
- 4165 exploit