CVE-2007-5756 - Vulnerability Details - OpenCVE

Description

Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests.

Published: 2007-11-14

Score: 6.9 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

Configuration 1 [-]

cpe:2.3:a:winpcap:winpcap:*:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00099.

Key SSVC decision points have not yet been added.

References

Link	Providers
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625
http://secunia.com/advisories/27676
http://www.securityfocus.com/bid/26409
http://www.securitytracker.com/id?1018935
http://www.vupen.com/english/advisories/2007/3835
http://www.winpcap.org/misc/changelog.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433

History

No history.

Subscriptions

Winpcap Winpcap

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-11-14T01:00:00.000Z

Updated: 2024-08-07T15:39:13.725Z

Reserved: 2007-10-31T00:00:00.000Z

Link: CVE-2007-5756

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-11-14T01:46:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-5756

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-129

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-11-09T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20071112 WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability", "tags": ["third-party-advisory", "x_refsource_IDEFENSE"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.winpcap.org/misc/changelog.htm"}, {"name": "1018935", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018935"}, {"name": "26409", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26409"}, {"name": "27676", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27676"}, {"name": "winpcap-bpffilterinit-code-execution(38433)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38433"}, {"name": "ADV-2007-3835", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3835"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5756", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20071112 WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability", "refsource": "IDEFENSE", "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625"}, {"name": "http://www.winpcap.org/misc/changelog.htm", "refsource": "CONFIRM", "url": "http://www.winpcap.org/misc/changelog.htm"}, {"name": "1018935", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018935"}, {"name": "26409", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26409"}, {"name": "27676", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27676"}, {"name": "winpcap-bpffilterinit-code-execution(38433)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38433"}, {"name": "ADV-2007-3835", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3835"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:39:13.725Z"}, "title": "CVE Program Container", "references": [{"name": "20071112 WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability", "tags": ["third-party-advisory", "x_refsource_IDEFENSE", "x_transferred"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.winpcap.org/misc/changelog.htm"}, {"name": "1018935", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1018935"}, {"name": "26409", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26409"}, {"name": "27676", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27676"}, {"name": "winpcap-bpffilterinit-code-execution(38433)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38433"}, {"name": "ADV-2007-3835", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3835"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5756", "datePublished": "2007-11-14T01:00:00.000Z", "dateReserved": "2007-10-31T00:00:00.000Z", "dateUpdated": "2024-08-07T15:39:13.725Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:winpcap:winpcap:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A6E528E-DE46-46F1-B8EA-0D885DA7D9E3", "versionEndExcluding": "4.0.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests."}, {"lang": "es", "value": "M\u00faltiples errores de \u00edndice de array en la funci\u00f3n bpf_filter_init en NPF.SYS en WinPcap anterior a 4.0.2, cuando funciona en modo monitor (tambi\u00e9n conocido c\u00f3mo Table Management Extensions o TME), y como es utilizado en Wireshark y posiblemente otros productos, permite a usuarios locales ganar privilegios a trav\u00e9s de respuestas IOCTL manipuladas."}], "id": "CVE-2007-5756", "lastModified": "2026-04-23T00:35:47.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-11-14T01:46:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/27676"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/26409"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1018935"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2007/3835"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "http://www.winpcap.org/misc/changelog.htm"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38433"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/27676"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/26409"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1018935"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2007/3835"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "http://www.winpcap.org/misc/changelog.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38433"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-129"}], "source": "nvd@nist.gov", "type": "Primary"}]}