high7.2
CVE-2007-5254
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by repla…
Impact
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virusblokada | Vba32 Antivirus | Version 3.12.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066313.html
- http://osvdb.org/37991
- http://secunia.com/advisories/27094
- http://www.anti-virus.by/en/
- http://www.securityfocus.com/bid/25930
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066313.html
- http://osvdb.org/37991
- http://secunia.com/advisories/27094
- http://www.anti-virus.by/en/
- http://www.securityfocus.com/bid/25930