CVE-2007-2083: zonelabs zonealarm

EPSS trend

Probability

0.77%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

0.00 pp

From 0.77% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoswindowsVerified
ZoneAlarm 6.1.744.001/6.5.737.000 - Vsdatant.SYS Driver Local Denial of Service
Maturity: poc

References

5 links

www.securityfocus.com/archive/1/465868/100/0/threadedMailing ListX Refsource BUGTRAQ
securityreason.com/securityalert/2591Third Party AdvisoryX Refsource SREASON
www.matousec.com/info/…X Refsource MISCPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33664VDB EntryX Refsource XF
osvdb.org/35239VDB EntryX Refsource OSVDB

Related vulnerabilities

CVE-2003-1309zonelabszonealarm2.28%19y ago30-11-2006 16:00The DeviceIoControl function in the TrueVector Device Driver (VSDATANT) in ZoneAlarm before 3.7.211, Pro before 4.0.146.029, and Plus before 4.0.146.029 allows local users to gain privileges via certain signals (aka "Device Driver Attack").CVE-2007-2467zonelabszonealarm0.34%19y ago02-05-2007 22:00ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a denial of service (system crash) by sending malformed data to the vsdatant device driver, which causes an invalid memory access.CVE-2007-5044zonelabszonealarm0.29%19y ago24-09-2007 00:00ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreatePort and (2) NtDeleteFile kernel SSDT hooks, a partial regression of CVE-2007-2083.CVE-2001-1373zonelabszonealarm1.50%23y ago02-04-2003 05:00MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.CVE-2001-1548zonelabszonealarm0.43%21y ago14-07-2005 04:00ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.CVE-2005-0114checkpointcheck_point_integrity_client+20.33%21y ago11-02-2005 05:00vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.

All vulnerabilities inzonealarm

CVE-2007-2083: zonelabs zonealarm

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References