ByteOS Network

NVD Vulnerability Details :

CVE-2007-3777

Modified

Source-cve@mitre.org

Published At-15 Jul, 2007 | 22:30

Updated At-15 Oct, 2018 | 21:30

avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

grisoft>>avg_antivirus>>7.5.446

cpe:2.3:a:grisoft:avg_antivirus:7.5.446:*:free:*:*:*:*:*

grisoft>>avg_antivirus>>7.5.448

cpe:2.3:a:grisoft:avg_antivirus:7.5.448:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/37975	cve@mitre.org	N/A
http://secunia.com/advisories/25998	cve@mitre.org	Patch Vendor Advisory
http://securityreason.com/securityalert/2887	cve@mitre.org	N/A
http://securitytracker.com/id?1018362	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/473360/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/24870	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/2518	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/35345	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History