CVE Vulnerabilities

CVE-2007-5254

Published: Oct 06, 2007 | Modified: Nov 15, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.

Affected Software

Name Vendor Start Version End Version
Vba32_antivirus Virusblokada 3.12.2 (including) 3.12.2 (including)

References