cbcvebase.
CVE-2007-5044
published 2007-09-24

CVE-2007-5044: ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users…

PriorityP416medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.29%
20.6th percentile
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreatePort and (2) NtDeleteFile kernel SSDT hooks, a partial regression of CVE-2007-2083.

Affected

1 ranges
VendorProductVersion rangeFixed in
zonelabszonealarm——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.