Lucene search

[email protected]CVE-2006-0951

HistoryApr 08, 2006 - 1:04 a.m.

CVE-2006-0951

2006-04-0801:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

nod32

nod32.exe

privilege escalation

cve-2006-0951

security vulnerability

scheduled scan

8 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.4%

JSON

The GUI (nod32.exe) in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors.

CPENameOperatorVersion
eset_software:nod32_antiviruseset software nod32 antiviruseq2.5

CPE	Name	Operator	Version
eset_software:nod32_antivirus	eset software nod32 antivirus	eq	2.5

References

secunia.com/advisories/19054

secunia.com/secunia_research/2006-17/advisory/

www.osvdb.org/24394

www.vupen.com/english/advisories/2006/1242

8 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.4%

JSON

Related for CVE-2006-0951

prion1