Description
ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access.
References
- 23734 vdb-entry
- ADV-2007-1608 vdb-entry
- http://www.matousec.com/info/advisories/ZoneAlarm-Insufficient-validation-of-vsdatant-driver-input-buffer.php
- zonealarm-vsdatant-inputbuffer-dos(34028) vdb-entry
- 35240 vdb-entry
- 20070501 ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability mailing-list
- 25064 third-party-advisory