CVE-2007-4967
Online Armor Personal Firewall 2.0.1.215 - Denial of Service and Privilege Escalation via SSDT Hooks
Title source: llmDescription
Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtAllocateVirtualMemory, (2) NtConnectPort, (3) NtCreateFile, (4) NtCreateKey, (5) NtCreatePort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12) NtResumeThread, (13) NtSetContextThread, (14) NtSetValueKey, (15) NtSuspendProcess, (16) NtSuspendThread, and (17) NtTerminateThread.
References (5)
Core 5
Core References
Various Sources x_refsource_misc
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
Various Sources x_refsource_misc
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25711
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/45951
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479830/100/0/threaded
Scores
EPSS
0.0032
EPSS Percentile
24.3%
Details
CWE
CWE-20
CWE-264
Status
published
Products (1)
online_armor/personal_firewall
2.0.1.215
Published
Sep 19, 2007
Tracked Since
Feb 18, 2026