CVE-2007-2523

published 2007-05-11

CVE-2007-2523: CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file…

Priority P3 35 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

EXPLOIT

CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
broadcom	integrated_threat_management	—	—
ca	anti-virus_for_the_enterprise	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.