NetSight
IP …
high7.2

CVE-2008-0366

CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a deni…

Impact

CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments.

Affected products

VendorProductAffected versions
Core Security TechnologiesCore Force
through 0.95.167

Weakness classification

CWE-119

References