CVE-2007-2083

vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (system crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateKey and (2) NtDeleteFile functions.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.77% chance of exploitation in the next 30 days, 53th percentile

Published

2007-04-18

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29860

References

• CVE Record
• NVD entry

Related

• CVE-2007-2082
• CVE-2007-2086
• CVE-2007-2081
• CVE-2007-2087
• CVE-2007-2080
• CVE-2007-2089