CVE-2007-2523

2007-05-1104:20:00

[email protected]

web.nvd.nist.gov

ca anti-virus

enterprise

threat manager

weak permissions

vulnerability

cve-2007-2523

buffer overflow

inocore.dll

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.

Affected configurations

NVD

Node

broadcomintegrated_threat_managementMatch8.0

caanti-virus_for_the_enterpriseMatch8enterprise

CPENameOperatorVersion
broadcom:integrated_threat_managementbroadcom integrated threat managementeq8.0
ca:anti-virus_for_the_enterpriseca anti-virus for the enterpriseeq8