Lucene search

[email protected]NVD:CVE-2007-4649

HistoryAug 31, 2007 - 11:17 p.m.

CVE-2007-4649

2007-08-3123:17:00

CWE-264

[email protected]

web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.

Affected configurations

NVD

Node

microworld_technologiesescan_anti-virusMatch9.0.722.1

microworld_technologiesescan_internet_securityMatch9.0.722.1

microworld_technologiesescan_virus_controlMatch9.0.722.1

References

lists.grok.org.uk/pipermail/full-disclosure/2007-August/065509.html

secunia.com/advisories/26581

securityreason.com/securityalert/3085

www.securityfocus.com/bid/25493

exchange.xforce.ibmcloud.com/vulnerabilities/36367

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for NVD:CVE-2007-4649

cvelist1 cve1 prion1