VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 24, 2007· Updated Jun 16, 2026

CVE-2007-5040

CVE-2007-5040

Description

Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtCreateThread, (3) NtDeleteValueKey, (4) NtQueryValueKey, (5) NtSetSystemInformation, and (6) NtSetValueKey kernel SSDT hooks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Ghostsecurity/Ghost Security Suite2 versions
    cpe:2.3:a:ghostsecurity:ghost_security_suite:alpha_1.200:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ghostsecurity:ghost_security_suite:alpha_1.200:*:*:*:*:*:*:*
    • (no CPE)range: alpha 1.200

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.