CVE-2007-2523: Buffer Overflow
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2523?
CVE-2007-2523 is considered a high severity vulnerability due to the potential for privilege escalation and exploitation through a stack-based buffer overflow.
How do I fix CVE-2007-2523?
To fix CVE-2007-2523, it is recommended to update to the latest version of CA Anti-Virus for the Enterprise and Threat Manager, specifically versions released after May 10, 2007.
What systems are affected by CVE-2007-2523?
CVE-2007-2523 affects CA Anti-Virus for the Enterprise version 8 and Broadcom eTrust Integrated Threat Management version 8.0.
What is the nature of the vulnerability in CVE-2007-2523?
The nature of CVE-2007-2523 involves weak file permissions leading to local users being able to modify shared file mappings and trigger potential buffer overflows.
Who is impacted by CVE-2007-2523?
Local users with access to the affected systems may be impacted by CVE-2007-2523 as they could exploit the vulnerability to gain elevated privileges.