NetSight
IP …
medium4.6

CVE-2007-0436

Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window…

Impact

Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.

Affected products

VendorProductAffected versions
Barron MccannInstall
Version bms1472
Barron MccannX-Kryptor Driver
Version bms1446hrr
Barron MccannX-Kryptor Secure Client
All versions
Barron MccannXgntr
Version bms1351

Weakness classification

CWE-264

References