CVE-2007-4580 Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSet...
HighCVSS 7.2
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bufferzonesecurity bufferzone | >= 2.1, <= 2.5 | No fix listed |
References
- 39154 broken-link vdb-entry
- 26608 broken-link third-party-advisory vendor-advisory
- 3071 third-party-advisory
- 20070824 Security vulnerability in BufferZone 2.5 broken-link mailing-list third-party-advisory vdb-entry
- bufferzone-redlight-privilege-escalation(36278) third-party-advisory vdb-entry