CVE-2006-3787: Kerio Personal Firewall

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Affected products

• Kerio Personal Firewall: up to and including 4.3.246

Published 2006-07-24. Last modified 2026-06-16.