CVE-2008-0366 CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly...
HighCVSS 7.2
EPSS 0.54%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| core security technologies core force | <= 0.95.167 | No fix listed |
References
- force.coresecurity.com
- 3555 third-party-advisory
- www.coresecurity.com patch
- 20080117 CORE-2007-1119: CORE FORCE Kernel Buffer Overflow mailing-list
- 27341 exploit patch vdb-entry
- 1019245 vdb-entry
- ADV-2008-0242 vdb-entry