CVE-2007-2965

CVE	CVE-2007-2965
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2007-05-31 23:30:00 UTC
Updated	2017-07-29 01:31:00 UTC
Description	Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via a crafted I/O request packet (IRP), related to IOCTL (Input/Output Control) and "access validation of the address space."

Problem Types: NVD-CWE-Other

Type	Vendor	Product	Version	Update	Edition	Language
Application	F-secure	F-secure Anti-virus	2005	All	All	All
Application	F-secure	F-secure Anti-virus	2006	All	All	All
Application	F-secure	F-secure Anti-virus	2007	All	All	All
Application	F-secure	F-secure Anti-virus	2005	All	All	All
Application	F-secure	F-secure Anti-virus	2006	All	All	All
Application	F-secure	F-secure Anti-virus	2007	All	All	All
Application	F-secure	F-secure Anti-virus	All	All	linux_gateways	All
Application	F-secure	F-secure Anti-virus	All	All	linux_servers	All
Application	F-secure	F-secure Anti-virus	All	All	windows_servers	All
Application	F-secure	F-secure Anti-virus	All	All	workstations	All
Application	F-secure	F-secure Anti-virus	All	All	citrix_servers	All
Application	F-secure	F-secure Anti-virus	All	All	mimesweeper	All
Application	F-secure	F-secure Anti-virus	All	All	ms_exchange	All
Application	F-secure	F-secure Anti-virus Client Security	All	All	All	All
Application	F-secure	F-secure Anti-virus Linux Client Security	All	All	All	All
Application	F-secure	F-secure Anti-virus Linux Server Security	All	All	All	All
Application	F-secure	F-secure Internet Security	2005	All	All	All
Application	F-secure	F-secure Internet Security	2006	All	All	All
Application	F-secure	F-secure Internet Security	2007	All	All	All
Application	F-secure	F-secure Internet Security	2005	All	All	All
Application	F-secure	F-secure Internet Security	2006	All	All	All
Application	F-secure	F-secure Internet Security	2007	All	All	All
Application	F-secure	F-secure Protection Service	All	All	consumers	All
Application	F-secure	Internet Gatekeeper	All	All	linux	All
Application	F-secure	Internet Gatekeeper	All	All	All	All

Reference	Source	Link	Tags
F-Secure Anti-Virus Real-Time Scanning Component Privilege Escalation - Advisories - Secunia	SECUNIA	secunia.com	Patch, Vendor Advisory
36727	OSVDB	osvdb.org
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	VUPEN	www.vupen.com
IBM X-Force Exchange	XF	exchange.xforce.ibmcloud.com
F-Secure Security Bulletin FSC-2007-2	CONFIRM	www.f-secure.com	Patch, Vendor Advisory
SecurityTracker.com Archives - F-Secure Internet Security Lets Remote Users Execute Arbitrary Code and Local Users Gain Elevated Privileges	SECTRACK	www.securitytracker.com
SecurityTracker.com Archives - F-Secure Anti-Virus Lets Remote Users Execute Arbitrary Code and Local Users Gain Elevated Privileges	SECTRACK	www.securitytracker.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.