CVE-2005-0114 | BDVDB-2026-8074 Detail

Description#

vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://download.zonelabs.com/bin/free/securityAlert/19.html
http://secunia.com/advisories/14256
http://www.securityfocus.com/bid/12531
http://www.idefense.com/application/poi/display?id=199&type=vulnerabilities

Exploit#

No public exploit known

History#

Version 12005-02-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.