vsdatant.sys in Zone Lab ZoneAlarm prior to 5.5.062.011, ZoneAlarm Wireless prior to 5.5.080.000, Check Point Integrity Client 4.x prior to 4.5.122.000 and 5.x prior to 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
zonelabs zonealarm 5.5.062.011 |
||
checkpoint check point integrity client |
||
zonelabs zonealarm wireless security |
||
checkpoint check point integrity client 4.5.122.000 |