CVE-2008-0366

EUVD-2008-0376
CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
Affected Products (NVD)
VendorProductVersion
core_security_technologiescore_force
𝑥
≤ 0.95.167
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://force.coresecurity.com/index.php?module=articles&func=display&aid=32
http://securityreason.com/securityalert/3555
http://www.coresecurity.com/?action=item&id=2025
http://www.securityfocus.com/archive/1/486513/100/0/threaded
http://www.securityfocus.com/bid/27341
http://www.securitytracker.com/id?1019245
http://www.vupen.com/english/advisories/2008/0242
http://force.coresecurity.com/index.php?module=articles&func=display&aid=32
http://securityreason.com/securityalert/3555
http://www.coresecurity.com/?action=item&id=2025
http://www.securityfocus.com/archive/1/486513/100/0/threaded
http://www.securityfocus.com/bid/27341
http://www.securitytracker.com/id?1019245
http://www.vupen.com/english/advisories/2008/0242