CVE-2005-0114

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://download.zonelabs.com/bin/free/securityAlert/19.htmlPatch, Vendor Advisory
http://secunia.com/advisories/14256
http://www.idefense.com/application/poi/display?id=199&type=vulnerabilitiesPatch, Vendor Advisory
http://www.securityfocus.com/bid/12531
http://download.zonelabs.com/bin/free/securityAlert/19.htmlPatch, Vendor Advisory
http://secunia.com/advisories/14256
http://www.idefense.com/application/poi/display?id=199&type=vulnerabilitiesPatch, Vendor Advisory
http://www.securityfocus.com/bid/12531

Timeline

Published: Feb 11, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01157.5Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file wi CVE-2005-01167.5AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir CVE-2005-01174.6Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.CVE-2005-01182.1helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to CVE-2005-01192.1helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.CVE-2005-01202.1helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.CVE-2005-01214.6Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argume CVE-2005-01242.1The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause CVE-2005-01257.2The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via CVE-2005-01267.5ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.CVE-2005-01275.0Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardw CVE-2005-01297.5The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" var