VULNERABILITY INTELLIGENCE

CVE-2007-2174

CVSS score7.2 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2007-04-24
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The IOCTL handling in srescan.sys in the ZoneAlarm Spyware Removal Engine (SRE) in Check Point ZoneAlarm before 5.0.156.0 allows local users to execute arbitrary code via certain IOCTL lrp parameter addresses.

Primary references