PT-2010-3894 · Sophos · Sophos Anti-Virus

Publicado 2010-06-16 · Atualizado 2018-10-10 · CVE-2010-2308

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus versions prior to 7.6.20

Description The issue is related to an unspecified vulnerability in the filter driver (savonaccessfilter.sys) of Sophos Anti-Virus. This vulnerability allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.

Recommendations For versions prior to 7.6.20, update to version 7.6.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the savonaccessfilter.sys driver to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2010-2308

Produtos afetados

Sophos Anti-Virus

Referências · 7

• http://secunia.com/advisories/40085 · Aviso do Fabricante
• http://dvlabs.tippingpoint.com/advisory/TPTI-10-03 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2308 · Nota de Segurança
• http://vupen.com/english/advisories/2010/1412 · Aviso do Fabricante
• http://sophos.com/support/knowledgebase/article/111126.html · Aviso do Fabricante
• http://securitytracker.com/id?1024089 · Nota
• http://securityfocus.com/archive/1/511773/100/0/threaded · Nota