PT-2010-3894 · Sophos · Sophos Anti-Virus

Published 2010-06-16 · Updated 2018-10-10 · CVE-2010-2308

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus versions prior to 7.6.20

Description The issue is related to an unspecified vulnerability in the filter driver (savonaccessfilter.sys) of Sophos Anti-Virus. This vulnerability allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.

Recommendations For versions prior to 7.6.20, update to version 7.6.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the savonaccessfilter.sys driver to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-2308

Affected Products

Sophos Anti-Virus

References · 7

• http://secunia.com/advisories/40085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2308 · Security Note
• http://vupen.com/english/advisories/2010/1412 · Vendor Advisory
• http://sophos.com/support/knowledgebase/article/111126.html · Vendor Advisory
• http://dvlabs.tippingpoint.com/advisory/TPTI-10-03 · Note
• http://securitytracker.com/id?1024089 · Note
• http://securityfocus.com/archive/1/511773/100/0/threaded · Note