low2.1Public exploit code
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to caus…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service2006-07-15 · dos · hardware · Verified
Impact
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kerio | Personal Firewall | through 4.3.246 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21060
- http://securityreason.com/securityalert/1260
- http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php
- http://www.securityfocus.com/archive/1/440112/100/100/threaded
- http://www.securityfocus.com/bid/18996
- http://www.vupen.com/english/advisories/2006/2828
- http://secunia.com/advisories/21060
- http://securityreason.com/securityalert/1260
- http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php
- http://www.securityfocus.com/archive/1/440112/100/100/threaded
- http://www.securityfocus.com/bid/18996
- http://www.vupen.com/english/advisories/2006/2828