Unscored severity · published Sep 24, 2007
CVE-2007-5040
Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtCreateThread, (3) NtDeleteValueKey, (4) NtQueryValueKey, (5) NtSetSystemInformation, and (6) NtSetValueKey kernel SSDT hooks.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Ghost Security Suite · Ghostsecurity
alpha_1.200 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5040
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5040
securityreason.com
http://securityreason.com/securityalert/3161
www.matousec.com
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
www.matousec.com
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/479830/100/0/threaded
More from Ghost Security Suite
–
CVE-2007-5039
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a…