CVE-2007-4968 Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and po...
MediumCVSS 4.4
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for (1) NtOpenProcess and (2) NtOpenThread.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| privacyware privatefirewall | = 5.0.14.2 | No fix listed |
References
- 45952 vdb-entry
- www.matousec.com
- www.matousec.com
- 20070918 Plague in (security) software drivers & BSDOhook utility mailing-list
- 25712 vdb-entry