CVE-2007-4648: Buffer Overflow
The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows local users to gain privileges by (1) triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by (2) sending a crafted KEVENT structure through ioctl 0xBF672028 to overwrite arbitrary memory locations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4648?
CVE-2007-4648 is considered a high-severity vulnerability due to its potential to allow local privilege escalation.
How do I fix CVE-2007-4648?
To fix CVE-2007-4648, update Norman Virus Control to a version that addresses this vulnerability.
What systems are affected by CVE-2007-4648?
CVE-2007-4648 specifically affects Norman Virus Control version 5.82.
What are the potential impacts of exploiting CVE-2007-4648?
Exploiting CVE-2007-4648 could allow local users to gain elevated privileges on the affected system.
What type of vulnerability is CVE-2007-4648?
CVE-2007-4648 is identified as a local privilege escalation vulnerability due to weak permissions in the nvcoaft51 driver.