Buffer overflow in Bufferzonesecurity Bufferzone

CVE-2007-4580

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (34.6th percentile) — read the EPSS interpretation.

Affected products

Bufferzonesecurity Bufferzone
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
cve@mitre.org (x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
cve@mitre.org (Third Party Advisory, x_refsource_SREASON, third-party-advisory)