iDefense Security Advisory 08.20.07: Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities

Check Point Zone Labs VSDATANT Multiple IOCTL Privilege Escalation Vulnerabilities iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-wa...

Design/Logic Flaw

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2007-2467

CVE-2007-2467 concerns ZoneAlarm Pro versions 6.5.737.000, 6.1.744.001 (and possibly earlier versions) where local users can trigger a denial of service (system crash) by sending malformed data to the vsdatant device driver, leading to an invalid memory access. The provided documents confirm the ...

CVE-2007-2467: Undefined Security Weakness

ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service system crash by sending malformed data to the vsdatant device driver, which causes an invalid memory access...

CVE-2003-1309: Undefined Security Weakness

The DeviceIoControl function in the TrueVector Device Driver VSDATANT in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals aka "Device Driver Attack"...