CVE-2007-4580: Bufferzonesecurity Bufferzone

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service (crash) and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large buffer.

Affected products

• Bufferzonesecurity Bufferzone: from 2.1, up to and including 2.5

Published 2007-08-28. Last modified 2026-06-16.