CVE-2007-1557 - Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause

CVE-2007-1557

Summary

Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain privileges via format string specifiers in the Management Server name field on the Communication settings page.

References

Vulnerable Configurations

cpe:2.3:a:f-secure:f-secure_anti-virus:6.02:*:client_security:*:*:*:*:*
cpe:2.3:a:f-secure:f-secure_anti-virus:6.02:*:client_security:*:*:*:*:*

CVSS

Base:	7.2 (as of 16-10-2018 - 16:39)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	23023
bugtraq	20070319 Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability
misc	http://www.layereddefense.com/F-SecureMar18.html
osvdb	34764
sreason	2472
vupen	ADV-2007-1055

Last major update

16-10-2018 - 16:39

Published

21-03-2007 - 01:19

Last modified

16-10-2018 - 16:39