Unscored severity · published Feb 11, 2005
CVE-2005-0114
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not…
–
CVSS
0.3%
EPSS
No
On KEV
Description
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Check Point Integrity Client · Checkpoint
through 5.1.556.166; 4.5.122.000 · source: NVD
ZO
Zonealarm · Zonelabs
5.5.062.011 · source: NVD
ZW
Zonealarm Wireless Security · Zonelabs
through 5.5.080.000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0114
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0114
Patch
http://download.zonelabs.com/bin/free/securityAlert/19.html
secunia.com
http://secunia.com/advisories/14256
Patch
http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities
www.securityfocus.com
http://www.securityfocus.com/bid/12531