VulnerabilityModified
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.
LOW 2.1EPSS 0.71%
Does this matter?
Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own.
Description
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 0.71% probability · 52th percentile
- CISA KEV
- Not listed
- Affected
- kerio/personal firewall
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21060Vendor Advisory
- http://securityreason.com/securityalert/1260
- http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php
- http://www.securityfocus.com/archive/1/440112/100/100/threaded
- http://www.securityfocus.com/bid/18996
- http://www.vupen.com/english/advisories/2006/2828
- http://secunia.com/advisories/21060Vendor Advisory
- http://securityreason.com/securityalert/1260
- http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php
- http://www.securityfocus.com/archive/1/440112/100/100/threaded
- http://www.securityfocus.com/bid/18996
- http://www.vupen.com/english/advisories/2006/2828
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.