6.6

CVE-2007-3681

The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Winpcap ≫ Winpcap Version3.1
Winpcap ≫ Winpcap Version4.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.38% 0.817
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.6 2.7 10
AV:L/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550
http://osvdb.org/37889
http://secunia.com/advisories/25982
Patch
Vendor Advisory
http://securitytracker.com/id?1018350
http://www.securityfocus.com/archive/1/473270/100/0/threaded
http://www.securityfocus.com/archive/1/473297/100/0/threaded
http://www.securityfocus.com/archive/1/473301/100/0/threaded
http://www.securityfocus.com/bid/24829
Patch
http://www.vupen.com/english/advisories/2007/2468
http://www.winpcap.org/misc/changelog.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/35309
https://www.exploit-db.com/exploits/4165