cve/2005/CVE-2005-3286.md

CVE-2005-3286

Description

The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability."

POC

Reference

• http://pb.specialised.info/all/adv/kerio-fwdrv-dos-adv.txt
• http://seclists.org/bugtraq/2005/Oct/166
• http://securityreason.com/securityalert/78

Github

No PoCs found on GitHub currently.