CVE-2007-4580

Name of the Vulnerable Software and Affected Versions BufferZone versions 2.1 through 2.5

Description The issue is related to a buffer underflow in the redlight.sys component. It can be triggered by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.

Recommendations For BufferZone versions 2.1 through 2.5, at the moment, there is no information about a newer version that contains a fix for this issue.