NVD

Id
56768  
Name
CVE-2007-4648  
Description
The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows local users to gain privileges by (1) triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by (2) sending a crafted KEVENT structure through ioctl 0xBF672028 to overwrite arbitrary memory locations.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-31  
Modified Date
2008-09-05  
Seq
2007-4648  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289372 56768 CVE-2007-4648 3087  View
289373 56768 CVE-2007-4648 http://www.48bits.com/exploits/nvc.rar  View
289374 56768 CVE-2007-4648 20070830 [48bits] Advisory : Multiple vulnerabilities in Norman NVC 5.82 driver  View
289375 56768 CVE-2007-4648 25499  View
289376 56768 CVE-2007-4648 1018636  View
289377 56768 CVE-2007-4648 norman-nvcoaft-privilege-escalation(36373)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55658 JVNDB-2007-004350 NVC の nvcoaft51 ドライバにおける権限を取得される脆弱性 Norman Virus Control (NVC) の nvcoaft51 ドライバは、NvcOa デバイスに対して弱いパーミッション (無制限書き込みアクセス) を使用するため、権限を取得される脆弱性が存在します。 CVE-2007-4648 28003 CVE-2007-4648 56768 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004350.html 2007-08-31 2012-09-25 View