What’s Vulnerable › Vulnerabilities

CVE-2006-3787

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-07-24 · updated 2026-06-16

Description

kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread.

Affected products

• Kerio Personal Firewall: through 4.3.246

References

• http://secunia.com/advisories/21060
• http://securityreason.com/securityalert/1260
• http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php
• http://www.securityfocus.com/archive/1/440112/100/100/threaded
• http://www.securityfocus.com/bid/18996
• http://www.vupen.com/english/advisories/2006/2828
• http://secunia.com/advisories/21060
• http://securityreason.com/securityalert/1260
• http://www.matousec.com/info/advisories/Kerio-Terminating-kpf4ss-exe-using-internal-runtime-error.php
• http://www.securityfocus.com/archive/1/440112/100/100/threaded
• http://www.securityfocus.com/bid/18996
• http://www.vupen.com/english/advisories/2006/2828

Get alerted when CVE-2006-3787 or the next vulnerability affects your stack