CVE-2007-2083

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.8%

from disclosure to weapon0 days

Published on NVDApr 18

1st PoCApr 15

exploitation probability

0.8%top 48% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (system crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateKey and (2) NtDeleteFile functions.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/29860

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/35239 http://securityreason.com/securityalert/2591 https://exchange.xforce.ibmcloud.com/vulnerabilities/33664 http://www.matousec.com/info/advisories/ZoneAlarm-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php http://www.securityfocus.com/archive/1/465868/100/0/threaded