First published: Mon Oct 01 2007(Updated: )
F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted (1) archive or (2) packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to system32 could also shut off F-Secure Anti-Virus.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 2003 Server | ||
F-secure F-secure Anti-virus | =7.00 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5143 is considered a medium severity vulnerability due to its potential to bypass virus scanning.
To fix CVE-2007-5143, ensure that the F-Secure Anti-Virus software is updated to the latest version that addresses this issue.
CVE-2007-5143 affects local users of F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition.
The impact of CVE-2007-5143 is that it allows local users to bypass the virus scanning on specific crafted files.
CVE-2007-5143 is not a privilege escalation vulnerability as it does not cross privilege boundaries in many environments.