CVE-2007-4580

ALTO 7.2CVE-2007-4580 · Published 28/08/2007 · updated 16/06/2026

In breve

CVE-2007-4580 è una vulnerabilità ALTO (CVSS 7.2) che riguarda bufferzone (bufferzonesecurity).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.42%, superiore al 36.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
bufferzone bufferzonesecurity	`≥ 2.1, ≤ 2.5`	No fix yet

Description

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.

References

osvdb.org/39154 · Broken Link
secunia.com/advisories/26608 · Broken Link
securityreason.com/securityalert/3071 · Third Party Advisory
securityfocus.com/archive/1/477726/100/0/threaded · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/36278 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free