CVE Vulnerability

CVE-2008-0365

Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments to (1) IOCTL functions in the Firewall module or (2) SSDT hook handler functions in the Registry module.

7.2 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://www.coresecurity.com/?action=item&id=2025
http://www.securityfocus.com/bid/27341
http://force.coresecurity.com/index.php?module=articles&func=display&aid=32
http://www.securitytracker.com/id?1019245
http://securityreason.com/securityalert/3555
http://www.vupen.com/english/advisories/2008/0242
https://exchange.xforce.ibmcloud.com/vulnerabilities/39758
http://www.securityfocus.com/archive/1/486513/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:core_security_technologies:core_force:*:*:*:*:*:*:*:*
Information

Published : 2008-01-18 11:00

Updated : 2018-10-15 09:59

NVD link : CVE-2008-0365

Mitre link : CVE-2008-0365

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer