CVE

Id
27134  
CVE No.
CVE-2007-3777  
Status
Candidate  
Description
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler.  
Phase
Assigned (20070715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277709 27134 CVE-2007-3777 BUGTRAQ:20070711 Advisory: Arbitrary kernel mode memory writes in AVG  View
277710 27134 CVE-2007-3777 URL:http://www.securityfocus.com/archive/1/archive/1/473360/100/0/threaded  View
277711 27134 CVE-2007-3777 BID:24870  View
277712 27134 CVE-2007-3777 URL:http://www.securityfocus.com/bid/24870  View
277713 27134 CVE-2007-3777 OSVDB:37975  View
277714 27134 CVE-2007-3777 URL:http://osvdb.org/37975  View
277715 27134 CVE-2007-3777 VUPEN:ADV-2007-2518  View
277716 27134 CVE-2007-3777 URL:http://www.vupen.com/english/advisories/2007/2518  View
277717 27134 CVE-2007-3777 SECTRACK:1018362  View
277718 27134 CVE-2007-3777 URL:http://securitytracker.com/id?1018362  View
277719 27134 CVE-2007-3777 SECUNIA:25998  View
277720 27134 CVE-2007-3777 URL:http://secunia.com/advisories/25998  View
277721 27134 CVE-2007-3777 SREASON:2887  View
277722 27134 CVE-2007-3777 URL:http://securityreason.com/securityalert/2887  View
277723 27134 CVE-2007-3777 XF:avg-avg7core-code-execution(35345)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57168 JVNDB-2007-005860 Squirrelmail 用の GPG Plugin の gpg_pop_init.php における PHP ローカルファイルインクルージョンの脆弱性 Squirrelmail 用の G/PGP (GPG) Plugin の gpg_pop_init.php は、MOD パラメータに関する処理に不備があるため、PHP ローカルファイルインクルージョンの脆弱性が存在します。 CVE-2007-3779 27134 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005860.html  View