CVE-2007-3681

WinPcap <4.0.1 - RCE

Title source: llm

Description

The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mario Ballano BÃ¡rcena · clocalwindows

https://www.exploit-db.com/exploits/4165

View Code ZIP pw:eip

References (12)

[Patch, Vendor Advisory] http://secunia.com/advisories/25982

[Patch] http://www.securityfocus.com/bid/24829

[Various Sources] http://www.winpcap.org/misc/changelog.htm

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/473270/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/473297/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/473301/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4165

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35309

[Third Party Advisory, VDB Entry] http://osvdb.org/37889

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1018350

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2468

[Third Party Advisory] http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550

Scores

EPSS 0.0010

EPSS Percentile 27.4%

Details

Status published

Products (2)

winpcap/winpcap 3.1

winpcap/winpcap 4.0

Published Jul 11, 2007

Tracked Since Feb 18, 2026