CVE-2007-2523

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=530	Vendor Advisory
http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp	Patch
http://www.securityfocus.com/bid/23906
http://blog.48bits.com/?p=103
http://www.kb.cert.org/vuls/id/788416	US Government Resource
http://www.securitytracker.com/id?1018043
http://secunia.com/advisories/25202
http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html
http://www.osvdb.org/34586
http://www.vupen.com/english/advisories/2007/1750
http://www.securityfocus.com/archive/1/468306/100/0/threaded

Configuration 1

cpe:2.3:a:ca:anti-virus_for_the_enterprise:8:*:enterprise:*:*:*:*:* cpe:2.3:a:broadcom:integrated_threat_management:8.0:*:*:*:*:*:*:*

---

Published : 2007-05-11 04:20

Updated : 2021-04-09 05:04

---

NVD link : CVE-2007-2523

Mitre link : CVE-2007-2523

No products.

NVD-CWE-Other