Computer Associates AntiVirus InoTask buffer overflow vulnerability

Overview

Computer Associates AntiVirus for the Enterprise and Threat Manager products contain a buffer overflow vulnerability that may be exploited by local users to execute code with elevated privileges.

Description

Computer Associates eTrust Antivirus v8 includes a component called InoTask. InoTask is used to schedule and lauch tasks and programs.

The InoTask process contains a buffer overflow vulnerability. By sending malformed data to the InoTask process, a user may be able to execute code with elevated privileges. Note that publicly available exploit code exists for this vulnerability.

---

Impact

A local user may be able to execute code with system privileges.

---

Solution

Upgrade

Computer Associates has released an update to address this vulnerability. This update is available as part of the automatic content update. See Computer Associates’ secnotice050807 for more details.

---

Vendor Information

788416

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Computer Associates __ Affected

Updated: May 11, 2007

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

See <http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp&gt; for more details.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23788416 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp&gt;
• <http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=530&gt;
• <http://secunia.com/advisories/25202/&gt;
• <http://www.48bits.com/exploits/etrust.c&gt;

Acknowledgements

Thanks to iDefense for information that was used in this report. iDefense credits binagres for discovering this vulnerability.

This document was written by Ryan Giobbi.

Other Information

CVE IDs:	CVE-2007-2523
Severity Metric:	0.29 Date Public: