Unscored severity · published May 11, 2007
CVE-2007-2523
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows…
–
CVSS
1.4%
EPSS
No
On KEV
Description
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Anti-virus For The Enterprise · CA
8 · source: NVD
IT
Integrated Threat Management · Broadcom
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2523
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2523
blog.48bits.com
http://blog.48bits.com/?p=103
Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=530
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063275.html
secunia.com
http://secunia.com/advisories/25202
Patch
http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp
US Government Resource
http://www.kb.cert.org/vuls/id/788416
More from Integrated Threat Management
–
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary…
–
CVE-2006-3223
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash)…