CVE-2008-1737
- State
- Published
- Severity
- Not scored
- Published
- Apr 29, 2008
- Updated
- Aug 7, 2024
- Reserved
- Apr 11, 2008
Description
Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 29996third-party-advisory
- 28743vdb-entry
- 3838third-party-advisory
- ADV-2008-1381vdb-entry
- sophos-ssdt-dos(42083)vdb-entry
- http://www.coresecurity.com/?action=item&id=2249
- http://www.sophos.com/support/knowledgebase/article/37810.html
- 20080428 CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewallsmailing-list
- 1019945vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.