Back to search
CVE-2007-3777
Published: Jul 15, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
37975
vdb-entry
x_refsource_OSVDB
avg-avg7core-code-execution(35345)
vdb-entry
x_refsource_XF
1018362
vdb-entry
x_refsource_SECTRACK
2887
third-party-advisory
x_refsource_SREASON
24870
vdb-entry
x_refsource_BID
20070711 Advisory: Arbitrary kernel mode memory writes in AVG
mailing-list
x_refsource_BUGTRAQ
25998
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2518
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now