CVE-2007-5254 VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrate...
HighCVSS 7.2
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| virusblokada vba32 antivirus | = 3.12.2 | No fix listed |
References
- 20071004 Vba32 AntiVirus v3.12.2 insecure file permissions exploit mailing-list vendor-advisory
- 37991 vdb-entry
- 27094 third-party-advisory
- www.anti-virus.by patch
- 25930 vdb-entry