CVE-2007-4971
ProSecurity 1.40 Beta 2 - Denial of Service and Privilege Escalation via SSDT Hook Manipulation
Title source: llmDescription
ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenSection, and (5) NtSetSystemTime.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/45956
Various Sources x_refsource_misc
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
Various Sources x_refsource_misc
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25718
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479830/100/0/threaded
Scores
EPSS
0.0028
EPSS Percentile
20.3%
Details
CWE
CWE-20
Status
published
Products (1)
isecsoft/prosecurity
1.40_beta_2
Published
Sep 19, 2007
Tracked Since
Feb 18, 2026