VulnerabilityModified

CVE-2007-3681

The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.

MEDIUM 6.6EPSS 2.38%

Does this matter?

Lower severity and a low EPSS score (2.38%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.6 MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C
EPSS: 2.38% probability · 83th percentile
CISA KEV: Not listed
Affected: winpcap/winpcap
Source: cve@mitre.org

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550
http://osvdb.org/37889
http://secunia.com/advisories/25982Patch, Vendor Advisory
http://securitytracker.com/id?1018350
http://www.securityfocus.com/archive/1/473270/100/0/threaded
http://www.securityfocus.com/archive/1/473297/100/0/threaded
http://www.securityfocus.com/archive/1/473301/100/0/threaded
http://www.securityfocus.com/bid/24829Patch
http://www.vupen.com/english/advisories/2007/2468
http://www.winpcap.org/misc/changelog.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/35309
https://www.exploit-db.com/exploits/4165
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550
http://osvdb.org/37889
http://secunia.com/advisories/25982Patch, Vendor Advisory
http://securitytracker.com/id?1018350
http://www.securityfocus.com/archive/1/473270/100/0/threaded
http://www.securityfocus.com/archive/1/473297/100/0/threaded
http://www.securityfocus.com/archive/1/473301/100/0/threaded
http://www.securityfocus.com/bid/24829Patch
http://www.vupen.com/english/advisories/2007/2468
http://www.winpcap.org/misc/changelog.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/35309
https://www.exploit-db.com/exploits/4165

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.