PT-2007-5015 · Grisoft · Avg Anti-Virus+1

Publicado 2007-07-15 · Atualizado 2018-10-15 · CVE-2007-3777

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Grisoft AVG Anti-Virus versions 7.5.0.444 through 7.5.448 Grisoft AVG Anti-Virus Free Edition version 7.5.446

Description The issue allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler. This is due to an internal function in the avg7core.sys driver that copies data to an arbitrary address.

Recommendations For Grisoft AVG Anti-Virus versions 7.5.0.444 through 7.5.448, consider restricting access to the DeviceIoControl handler until a patch is available. For Grisoft AVG Anti-Virus Free Edition version 7.5.446, avoid using the 0x5348E004 IOCTL until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3777

Produtos afetados

Avg Anti-Virus

Avg Anti-Virus Free Edition

Referências · 9

• http://securityreason.com/securityalert/2887 · Nota
• http://securityfocus.com/bid/24870 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3777 · Nota de Segurança
• http://securitytracker.com/id?1018362 · Nota
• http://securityfocus.com/archive/1/473360/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35345 · Nota
• http://secunia.com/advisories/25998 · Aviso do Fabricante
• http://osvdb.org/37975 · Nota
• http://vupen.com/english/advisories/2007/2518 · Nota