CVEvulnerability

CVE-2007-2965

7.2 HIGH Published 2007-05-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via a crafted I/O request packet (IRP), related to IOCTL (Input/Output Control) and "access validation of the address space."

Affected configurations

• f-secure f-secure anti-virus (<= 4.65) • f-secure f-secure anti-virus (<= 5.42) • f-secure f-secure anti-virus (<= 5.44) • f-secure f-secure anti-virus (<= 5.52) • f-secure f-secure anti-virus (<= 5.61) • f-secure f-secure anti-virus (<= 6.40) • f-secure f-secure anti-virus 2005 • f-secure f-secure anti-virus 2006 • f-secure f-secure anti-virus 2007 • f-secure f-secure anti-virus client security (<= 6.03) • f-secure f-secure anti-virus linux client security (<= 5.30) • f-secure f-secure anti-virus linux server security (<= 5.30) • f-secure f-secure internet security 2005 • f-secure f-secure internet security 2006 • f-secure f-secure internet security 2007 • f-secure f-secure protection service (<= 6.40) • f-secure internet gatekeeper (<= 2.16) • f-secure internet gatekeeper (<= 6.60)

References