NetSight
IP …
high7.2

CVE-2007-2965

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, …

Impact

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via a crafted I/O request packet (IRP), related to IOCTL (Input/Output Control) and "access validation of the address space."

Affected products

VendorProductAffected versions
F-SecureF-Secure Anti-Virus
through 4.65
through 5.42
through 5.44
through 5.52
through 5.61
through 6.40
F-SecureF-Secure Anti-Virus Client Security
through 6.03
F-SecureF-Secure Anti-Virus Linux Client Security
through 5.30
F-SecureF-Secure Anti-Virus Linux Server Security
through 5.30
F-SecureF-Secure Internet Security
Versions 2005, 2006, 2007
F-SecureF-Secure Protection Service
through 6.40
F-SecureInternet Gatekeeper
through 2.16
through 6.60

References