VULNERABILITY INTELLIGENCE
CVE-2007-2083
CVSS score6.9 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2007-04-18
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Description
vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (system crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateKey and (2) NtDeleteFile functions.