CVE-2007-4969
Process Monitor 1.22 - Denial of Service via SSDT Hook Parameter Validation
Title source: llmDescription
Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtLoadKey, (4) NtOpenKey, (5) NtQueryValueKey, (6) NtSetValueKey, and (7) NtUnloadKey.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/45953
Various Sources x_refsource_misc
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
Various Sources x_refsource_misc
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25719
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479830/100/0/threaded
Scores
EPSS
0.0028
EPSS Percentile
20.3%
Details
CWE
CWE-20
Status
published
Products (1)
sysinternals/process_monitor
1.22
Published
Sep 19, 2007
Tracked Since
Feb 18, 2026