Unscored severity · published Jul 11, 2007
CVE-2007-3681
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winpcap · Winpcap
3.1; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3681
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3681
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550
osvdb.org
http://osvdb.org/37889
Patch
http://secunia.com/advisories/25982
securitytracker.com
http://securitytracker.com/id?1018350
www.securityfocus.com
http://www.securityfocus.com/archive/1/473270/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/473297/100/0/threaded
More from Winpcap
–
CVE-2007-5756
Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in…