CVE-2004-1109: Medium severity Kerio Personal Firewall vulnerability
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1109?
CVE-2004-1109 has a moderate severity rating as it can cause a denial of service through high CPU consumption and system freeze.
How do I fix CVE-2004-1109?
To fix CVE-2004-1109, update to Kerio Personal Firewall version 4.1.2 or later, which addresses the vulnerability.
What types of packets can exploit CVE-2004-1109?
CVE-2004-1109 can be exploited using TCP, UDP, or ICMP packets with a zero-length IP Option field.
Which versions of Kerio Personal Firewall are affected by CVE-2004-1109?
Kerio Personal Firewall versions 4.0.6 through 4.1.1 are vulnerable to CVE-2004-1109.
What is the impact of CVE-2004-1109 on users?
The impact of CVE-2004-1109 includes potential system crashes due to infinite loops causing denial of service.