CVE-2007-5044

ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreatePort and (2) NtDeleteFile kernel SSDT hooks, a partial regression of CVE-2007-2083.
Configurations

Configuration 1

cpe:2.3:a:zonelabs:zonealarm:7.0.362.000:*:pro:*:*:*:*:*

Information

Published : 2007-09-24 12:17

Updated : 2018-10-15 09:40


NVD link : CVE-2007-5044

Mitre link : CVE-2007-5044

Products Affected
No products.
CWE