Description
Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.
References
- 39154 vdb-entry
- 26608 third-party-advisory
- bufferzone-redlight-privilege-escalation(36278) vdb-entry
- 20070824 Security vulnerability in BufferZone 2.5 mailing-list
- 3071 third-party-advisory