Description
Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to execute arbitrary code as SYSTEM by sending a crafted DeviceIoControl command, then removing an allowed program from the firewall list.
References
- 15745 third-party-advisory
- 15016 vdb-entry
- ADV-2005-1973 vdb-entry
- 19868 vdb-entry
- 20051006 Secunia Research: Webroot Desktop Firewall Two Vulnerabilities mailing-list
- http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332
- 1015012 vdb-entry
- webroot-pwiwrapper-bo(22529) vdb-entry
- http://secunia.com/secunia_research/2005-10/advisory/