Lucene search

K
cve[email protected]CVE-2007-5756
HistoryNov 14, 2007 - 1:46 a.m.

CVE-2007-5756

2007-11-1401:46:00
CWE-129
web.nvd.nist.gov
26
cve-2007-5756
array index errors
bpf_filter_init
npf.sys
winpcap
privileges
ioctl requests
wireshark
monitor mode.

6.8 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests.

CPENameOperatorVersion
winpcap:winpcapwinpcaplt4.0.2

6.8 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%