Online Armor Personal Firewall... CVE-2007-4967 CNNVD-200709-228

4.4 AV AC AU C I A
发布: 2007-09-19
修订: 2018-10-15

Online Armor Personal Firewall 2.0.1.215不能正确确认System Service Descriptor Table (SSDT)函数操作者的特定参数,本地用户可以借助包括(1) NtAllocateVirtualMemory, (2) NtConnectPort, (3) NtCreateFile, (4) NtCreateKey, (5) NtCreatePort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12) NtResumeThread, (13) NtSetContextThread, (14) NtSetValueKey, (15) NtSuspendProcess, (16) NtSuspendThread,和(17) NtTerminateThread.在内的Windows Native API函数的未明核心SSDT陷阱造成拒绝服务(崩溃)并可能获得特权。

0%
暂无可用Exp或PoC
当前有1条受影响产品信息