CVE:CVE-2007-5042
CNNVD:CNNVD-200709-339
Outpost Firewall Pro 4.0.1025.7828不能正确确认System Service Descriptor Table (SSDT)函数处理的某些参数,本地用户可以借助(1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation,和(5) NtSetValueKey内核SSDT钩子造成拒绝服务(崩溃)并可能获得特权。
solution:Upgrade agnitum outpost_firewall to a higher version than 4.0.1025.7828,and avoid the version 4.0.1025.7828