PT-2007-1907 · Barron Mccann · Barron Mccann X-Kryptor Driver

Published 2007-02-04 · Updated 2024-02-14 · CVE-2007-0436

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Barron McCann X-Kryptor Driver

Description The issue allows local users to gain LocalSystem privileges via interactive use of Explorer, due to the failure of the Barron McCann X-Kryptor Driver to drop privileges when launching an Explorer window in response to a help command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-0436

Affected Products

Barron Mccann X-Kryptor Driver

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-0436 · Security Note
• http://secunia.com/advisories/24045 · Vendor Advisory
• http://vupen.com/english/advisories/2007/0496 · Vendor Advisory
• http://cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx?id=va-20070129-0107.xml · Note
• http://bemacpromotions.com/files/xkpatch462660.zip · Note
• http://jvn.jp/niscc/NISCC-462660/index.html · Note
• http://cpni.gov.uk/Products/advisories/default.aspx?id=al-20070129-0107.xml · Note
• http://barronmccann.com/ISec/s2pressrelease.asp?PRID=141&S2ID=14 · Note
• http://osvdb.org/33110 · Note
• http://securityfocus.com/bid/22424 · Note