F-Secure Anti-Virus real-time scanning-komponent rettighedseskalering - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

F-Secure Anti-Virus real-time scanning-komponent rettighedseskalering

Secunia Advisory:	SA25439
Udsendt:	2007-05-30
Sidste Opdt.:	2007-06-01

Kritisk:	Mindre kritisk
Betydning:	Rettighedseskalering
Hvor:	Lokalt System
Løsning Status:	Producent Patch

Software:	F-Secure Anti-Virus 2005 F-Secure Anti-Virus 2006 F-Secure Anti-Virus 2007 F-Secure Anti-Virus 5.x F-Secure Anti-Virus Client Security 6.x F-Secure Anti-Virus for Citrix Servers 5.x F-Secure Anti-Virus for MIMEsweeper 5.x F-Secure Anti-Virus for Windows Servers 5.x F-Secure Anti-Virus for Workstations 5.x F-Secure Internet Security 2005 F-Secure Internet Security 2006 F-Secure Internet Security 2007

CVE reference:	CVE-2007-2965 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beskrivelse: Der er rapporteret en sårbarhed i diverse F-Secure produkter, som kan udnyttes af ondsindede, lokale brugere til at opnå eskalerede rettigheder. Sårbarheden skyldes en fejl i real-time scanning-komponenten og kan udnyttes til at eksekvere vilkårlig kode med eskalerede rettigheder via specielt udformede I/O forespørgselspakker (IRP). Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector. Løsning: F-Secure Internet Security 2005 - 2007: Hotfix distribueret automatisk. F-Secure Anti-Virus 2005 - 2007: Hotfix distribueret automatisk. F-Secure Protection Service for Consumers 5.00 - 6.40: Hotfix distribueret automatisk. F-Secure Anti-Virus for Workstations 5.44: ftp://ftp.f-secure.com/support/hotfix/fsavcs/fsavwk602-04-signed.fsfix F-Secure Anti-Virus Client Security 6.00 - 6.03: ftp://ftp.f-secure.com/support/hotfix/fsavcs/fsavwk602-04-signed.fsfix F-Secure Anti-Virus for Windows Servers 5.50- 5.52: ftp://ftp.f-secure.com/support/hotfix/fsav-server/fsavsr552-11-signed.fsfix F-Secure Anti-Virus for Citrix Servers 5.50-5.52: ftp://ftp.f-secure.com/support/hotfix/fsav-server/fsavsr552-11-signed.fsfix F-Secure Anti-Virus for MIMEsweeper 5.61: ftp://ftp.f-secure.com/support/hotfix/fsav-server/fsavsr552-11-signed.fsfix Rapporteret af / Kredit: Rapporteret af producenten. Forløb: 01-06-2007: Tilføjede CVE-reference. Original Advisory: F-Secure: http://www.f-secure.com/security/fsc-2007-2.shtml



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

11 Relaterede Secunia Advisories, displaying 10

1. F-Secure LHA- og RAR-arkiver sikkerhedsomgåelse

2. F-Secure scanning af pakkede eksekverbare filer og arkiver Denial of Service

3. F-Secure Products LHA-arkivhåndtering buffer overflow

4. F-Secure Antivirus produkter omgåelse af scanning

5. F-Secure Anti-Virus arkiv-håndtering sårbarheder

6. F-Secure flere produkter ARJ arkiv-håndtering buffer overflow

7. F-Secure produkter zip-arkiv omgåelse af scanningsfunktionalitet

8. F-Secure Anti-Virus produkter LHA-arkiv buffer overflow

9. F-Secure Anti-Virus omgåelse af virus-detektion

10. F-Secure BackWeb rettighedseskalering

Vis alle relaterede advisories

Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com. Ideer, foreslag og andet feedback er også meget velkommen.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	phpJobScheduler "installed_conf ig_file" File Inclusion Vulnerabilities

2.	Subdreamer Light Global Variables SQL Injection Vulnerability

3.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

4.	Caudium "configvar" Insecure Temporary Files

5.	Slackware update for amarok

6.	Adium MSN SLP Message Integer Overflow Vulnerabilities

7.	dotProject SQL Injection and Cross-Site Scripting

8.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

9.	GpsDrive "geo-code" Insecure Temporary Files

10.	Sun Solaris Kernel Covert Channel Security Bypass