CVEvulnerability

CVE-2007-5756

6.9 MEDIUM Published 2007-11-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-11-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-129

Description

Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests.

Affected configurations

• winpcap winpcap (< 4.0.2)

Weakness · CWE (1)

CWE-129 Improper Validation of Array Index weakness

Referenced by CWE · observed example (2)

CWE-129 Improper Validation of Array Index weakness
CWE-781 Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code weakness

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625 Broken Link
http://secunia.com/advisories/27676 Broken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/26409 Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018935 Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3835 Broken Link
http://www.winpcap.org/misc/changelog.htm Release Notes
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433 Third Party Advisory, VDB Entry
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625 Broken Link
http://secunia.com/advisories/27676 Broken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/26409 Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018935 Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3835 Broken Link
http://www.winpcap.org/misc/changelog.htm Release Notes
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433 Third Party Advisory, VDB Entry