CVE-2007-5756

Опубликовано: 14 нояб. 2007

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests.

Ссылки

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625
Broken Link
http://secunia.com/advisories/27676
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/26409
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018935
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/3835
Broken Link
http://www.winpcap.org/misc/changelog.htm
Release Notes
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433
Third Party Advisory
VDB Entry
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625
Broken Link
http://secunia.com/advisories/27676
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/26409
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018935
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/3835
Broken Link
http://www.winpcap.org/misc/changelog.htm
Release Notes
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:winpcap:winpcap:*:*:*:*:*:*:*:*

Версия до 4.0.2 (исключая)

EPSS

Процентиль: 13%

0.00043

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-129

Связанные уязвимости

GHSA-jjw7-6pfq-97j9

github

почти 4 года назад