CVE-2003-1309

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html
Exploit
Vendor Advisory
http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html
http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt
http://sec-labs.hack.pl/papers/win32ddc.php
http://secunia.com/advisories/9459
Patch
Vendor Advisory
http://www.osvdb.org/2375
Patch
Vendor Advisory
http://www.osvdb.org/4362
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8342
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/12824
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0070.html
Exploit
Vendor Advisory
http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html
http://sec-labs.hack.pl/advisories/seclabs-adv-zone-alarm-04-08-2003.txt
http://sec-labs.hack.pl/papers/win32ddc.php
http://secunia.com/advisories/9459
Patch
Vendor Advisory
http://www.osvdb.org/2375
Patch
Vendor Advisory
http://www.osvdb.org/4362
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8342
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/12824

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zonelabs:zonealarm:3.7.202:*:*:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm:3.7.211:*:plus:*:*:*:*:*

cpe:2.3:a:zonelabs:zonealarm:3.7.211:*:pro:*:*:*:*:*

EPSS

Процентиль: 78%

0.01104

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-x2hr-29w2-c5r2

github

почти 4 года назад