SHARE
CORE IMPACT v7.6 - Exploits Update (Wed Oct 22 2008)
ZoneAlarm VSDATANT IOCTL Handler Privilege Escalation Exploit Update
Exploits/Local [Windows]
• Wed Oct 22 2008
This module exploits a vulnerability in ZoneAlarm products when the 0x8400000F function is invoked with a specially crafted parameter. The IOCTL 0x8400000F handler in the VSDATANT.SYS device driver in ZoneAlarm products allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters to obtain escalated privileges. This update adds support for Windows XP SP3.
Exploits Vulnerabiltiy: CVE-2007-4216