CVE-2007-4972 RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain p...
LowCVSS 1.9
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sysinternals regmon | = 7.04 | No fix listed |
References
- 45957 vdb-entry
- www.matousec.com
- www.matousec.com
- 20070918 Plague in (security) software drivers & BSDOhook utility mailing-list
- 25721 vdb-entry