CVE-2007-2523

2007-05-1104:20:00

mitre

web.nvd.nist.gov

ca anti-virus

enterprise

threat manager

weak permissions

vulnerability

cve-2007-2523

buffer overflow

inocore.dll

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.

Affected configurations

Nvd

Node

broadcomintegrated_threat_managementMatch8.0

caanti-virus_for_the_enterpriseMatch8enterprise

VendorProductVersionCPE
broadcomintegrated_threat_management8.0cpe:2.3:a:broadcom:integrated_threat_management:8.0:*:*:*:*:*:*:*
caanti-virus_for_the_enterprise8cpe:2.3:a:ca:anti-virus_for_the_enterprise:8:*:enterprise:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	integrated_threat_management	8.0	cpe:2.3:a:broadcom:integrated_threat_management:8.0:::::::*
ca	anti-virus_for_the_enterprise	8	cpe:2.3:a:ca:anti-virus_for_the_enterprise:8::enterprise:::::