NVD

Id
54687  
Name
CVE-2007-2523  
Description
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-11  
Modified Date
2011-03-07  
Seq
2007-2523  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277618 54687 CVE-2007-2523 http://blog.48bits.com/?p=103  View
277619 54687 CVE-2007-2523 20070509 Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability  View
277620 54687 CVE-2007-2523 20050711 [CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilities  View
277621 54687 CVE-2007-2523 http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp  View
277622 54687 CVE-2007-2523 VU#788416  View
277623 54687 CVE-2007-2523 20070511 Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability  View
277624 54687 CVE-2007-2523 23906  View
277625 54687 CVE-2007-2523 1018043  View
277626 54687 CVE-2007-2523 ADV-2007-1750  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53287 JVNDB-2007-001979 CA Anti-Virus for the Enterprise および Threat Manager における共有ファイルマッピングを変更される脆弱性 CA Anti-Virus for the Enterprise および Threat Manager は、Task Service の共有ファイルマッピングに脆弱なパーミッション (NULL セキュリティ記述子) を使用するため、共有ファイルマッピングを変更される、および権限を取得される脆弱性が存在します。 CVE-2007-2523 25878 CVE-2007-2523 54687 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001979.html 2007-05-11 2012-06-26 View