Vulnerability in Sysinternals Regmon

CVE-2007-4972

RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.

EPSS: 0.003 (20.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References