CVE-2007-4375

Description

The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to (1) obtain sensitive information (process memory contents), as demonstrated by an attack that obtains module base addresses to defeat Address Space Layout Randomization (ASLR); or (2) cause a denial of service (application crash) via an out-of-bounds address.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/36008

https://exchange.xforce.ibmcloud.com/vulnerabilities/36007

http://www.securityfocus.com/bid/25320

http://www.securityfocus.com/archive/1/476954/100/0/threaded

http://securityreason.com/securityalert/3018

http://secunia.com/advisories/26431

http://osvdb.org/39547

http://osvdb.org/39546

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS