Unscored severity · published Sep 24, 2007
CVE-2007-5039
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Ghost Security Suite · Ghostsecurity
1.110_beta · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5039
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5039
osvdb.org
http://osvdb.org/45895
securityreason.com
http://securityreason.com/securityalert/3161
www.matousec.com
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
www.matousec.com
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/479830/100/0/threaded
More from Ghost Security Suite
–
CVE-2007-5040
Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a…