CVE-2005-3286: Kerio Personal Firewall

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability."

Affected products

• Kerio Personal Firewall: version 4.2 only
• Kerio Serverfirewall: version 1.1.1 only

Published 2005-10-23. Last modified 2026-06-16.