Vulnerability Description
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Virusblokada | Vba32 Antivirus | 3.12.2 |
Related Weaknesses (CWE)
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066313.htmlExploitVendor Advisory
- http://osvdb.org/37991
- http://secunia.com/advisories/27094
- http://www.anti-virus.by/en/Patch
- http://www.securityfocus.com/bid/25930
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066313.htmlExploitVendor Advisory
- http://osvdb.org/37991
- http://secunia.com/advisories/27094
- http://www.anti-virus.by/en/Patch
- http://www.securityfocus.com/bid/25930
FAQ
What is CVE-2007-5254?
CVE-2007-5254 is a vulnerability with a CVSS score of 7.2 (HIGH). VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrate...
How severe is CVE-2007-5254?
CVE-2007-5254 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-5254?
Check the references section above for vendor advisories and patch information. Affected products include: Virusblokada Vba32 Antivirus.