CVE-2003-1309

CVE-2003-1309 affects the ZoneAlarm true vector device driver (VSDATANT) in ZoneAlarm prior to 3.7.211, Pro prior to 4.0.146.029, and Plus prior to 4.0.146.029. The issue enables local privilege elevation via the DeviceIoControl interface by exploiting signals (the so‑called “Device Driver Attack...

Microsoft Windows system services privilege escalation

There are several local services SSDP Discovery service, Universal Plug and Play Host service allow any authenticated user to configure service. It makes it possible to specify executable file and elevate privilege to Local System. Also vulnerable: HP Software: "Pml Driver HPZ12" HP Printer...

CVE-2003-1309

The DeviceIoControl function in the TrueVector Device Driver VSDATANT in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals aka "Device Driver Attack"...