CVE-2007-5254

CVE-2007-5254

EPSS 0.5%

VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/066313.html http://osvdb.org/37991 http://secunia.com/advisories/27094 http://www.anti-virus.by/en/http://www.securityfocus.com/bid/25930