Every CVESearch/Get API key

CVE-2006-3787

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the...

2.1 LowPublic exploit

CVE-2006-3787 is a low vulnerability (CVSS 2.1) in Kerio Personal Firewall, published July 21, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 54th percentile. No source names a fixed version.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.71%EPSS, 54th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Exploit likelihood

0.71%Down 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service2006-07-15

What each source reports

NVD Score used2.1

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Record
CVE-2006-3787
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Record
CVE-2006-3787
Updated
2026-11-02
EUVDEUVD-2006-3781No score

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Record
EUVD-2006-3781
Updated
2026-11-03
GitHub AdvisoriesGHSA-fj3f-9pm8-f5ppNo score

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the...

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Record
GHSA-fj3f-9pm8-f5pp
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open