CVEvulnerability
CVE-2007-3681
6.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-07-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.6 MEDIUM — AV:L/AC:M/Au:S/C:C/I:C/A:C
Description
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
Affected configurations
• winpcap winpcap 3.1
• winpcap winpcap 4.0
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 labs.idefense.com
- http://osvdb.org/37889 osvdb.org
- http://secunia.com/advisories/25982 Patch, Vendor Advisory
- http://securitytracker.com/id?1018350 securitytracker.com
- http://www.securityfocus.com/archive/1/473270/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/473297/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/473301/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24829 Patch
- http://www.vupen.com/english/advisories/2007/2468 www.vupen.com
- http://www.winpcap.org/misc/changelog.htm www.winpcap.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35309 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4165 www.exploit-db.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 labs.idefense.com
- http://osvdb.org/37889 osvdb.org
- http://secunia.com/advisories/25982 Patch, Vendor Advisory
- http://securitytracker.com/id?1018350 securitytracker.com
- http://www.securityfocus.com/archive/1/473270/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/473297/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/473301/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24829 Patch
- http://www.vupen.com/english/advisories/2007/2468 www.vupen.com
- http://www.winpcap.org/misc/changelog.htm www.winpcap.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35309 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4165 www.exploit-db.com