Vulnerability Description
Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bufferzonesecurity | Bufferzone | >= 2.1, <= 2.5 |
Related Weaknesses (CWE)
References
- http://osvdb.org/39154Broken Link
- http://secunia.com/advisories/26608Broken LinkVendor Advisory
- http://securityreason.com/securityalert/3071Third Party Advisory
- http://www.securityfocus.com/archive/1/477726/100/0/threadedBroken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36278Third Party AdvisoryVDB Entry
- http://osvdb.org/39154Broken Link
- http://secunia.com/advisories/26608Broken LinkVendor Advisory
- http://securityreason.com/securityalert/3071Third Party Advisory
- http://www.securityfocus.com/archive/1/477726/100/0/threadedBroken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36278Third Party AdvisoryVDB Entry
FAQ
What is CVE-2007-4580?
CVE-2007-4580 is a vulnerability with a CVSS score of 7.2 (HIGH). Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSet...
How severe is CVE-2007-4580?
CVE-2007-4580 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-4580?
Check the references section above for vendor advisories and patch information. Affected products include: Bufferzonesecurity Bufferzone.