CVE-2004-1109

Published: Jan 10, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.

Affected (8)

Products: Kerio: Personal Firewall

Kerio

1 product

Personal Firewall

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Kerio Personal Firewall	Version 4.0.10
Kerio Personal Firewall	Version 4.0.16
Kerio Personal Firewall	Version 4.0.6
Kerio Personal Firewall	Version 4.0.7
Kerio Personal Firewall	Version 4.0.8
Kerio Personal Firewall	Version 4.0.9
Kerio Personal Firewall	Version 4.1.1
Kerio Personal Firewall	Version 4.1