Unscored severity · published Nov 14, 2007
CVE-2007-5756
Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winpcap · Winpcap
before 4.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5756
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5756
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625
Broken Link
http://secunia.com/advisories/27676
Broken Link
http://www.securityfocus.com/bid/26409
Broken Link
http://www.securitytracker.com/id?1018935
Broken Link
http://www.vupen.com/english/advisories/2007/3835
Release Notes
http://www.winpcap.org/misc/changelog.htm
More from Winpcap
–
CVE-2007-3681
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt…