CVE-2007-4580

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.

• CWE-787

• http://osvdb.org/39154Broken Link
• http://secunia.com/advisories/26608Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/3071Third Party Advisory
• http://www.securityfocus.com/archive/1/477726/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36278Third Party Advisory, VDB Entry
• http://osvdb.org/39154Broken Link
• http://secunia.com/advisories/26608Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/3071Third Party Advisory
• http://www.securityfocus.com/archive/1/477726/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36278Third Party Advisory, VDB Entry

Published

Aug 28, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4574Unspecified vulnerability in the "stack unwinder fixes" in k…
• CVE-2007-4575HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 bef…
• CVE-2007-4576Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-4577Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote…
• CVE-2007-4578Sophos Anti-Virus for Windows and for Unix/Linux before 2.48…
• CVE-2007-4579Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-4581SQL injection vulnerability in acrotxt.php in WBB2-Addon: Ac…
• CVE-2007-4582Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 Ac…
• CVE-2007-4583Multiple absolute path traversal vulnerabilities in the nvUt…
• CVE-2007-4584Stack-based buffer overflow in BitchX 1.1 Final allows remot…
• CVE-2007-4585Directory traversal vulnerability in activateuser.php in 253…
• CVE-2007-4586Multiple buffer overflows in php_iisfunc.dll in the iisfunc …