vulnwire
5.8med

CVE-2007-43751 exploit

The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memor…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
5.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.4%
percentile 89%
Public exploits
1
Exploit-DB

The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to (1) obtain sensitive information (process memory contents), as demonstrated by an attack that obtains module base addresses to defeat Address Space Layout Randomization (ASLR); or (2) cause a denial of service (application crash) via an out-of-bounds address.

Exploit prediction (EPSS)

3.38% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

Exploits and detections

  • EDB-4292 Diskeeper 9 - Remote Memory Disclosure · remote · 2007-08-17

CVSS scores

Assigned byVersionScoreVector
NVD2.05.8AV:N/AC:M/Au:N/C:P/I:N/A:P

References

  • securityfocus.com /bid/25320 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/36008 · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /39546 · vdb-entry, x_refsource_OSVDB, x_transferred
  • osvdb.org /39547 · vdb-entry, x_refsource_OSVDB, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2007-August/065245.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/36007 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/26431 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/476954/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityreason.com /securityalert/3018 · third-party-advisory, x_refsource_SREASON, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.