CVE-2007-3800

{"id": "CVE-2007-3800", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": true, "exploitabilityScore": 1.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-07-16T23:30:00.000", "references": [{"url": "http://osvdb.org/36116", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26054", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11c.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24810", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2506", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35352", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/36116", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26054", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11c.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/24810", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2506", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35352", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Real-time scanner (RTVScan) en Symantec AntiVirus Corporate Edition 9.0 hasta la 10.1 y Client Security 2.0 hasta la 3.1, cuando la ventana Notification Message est\u00e1 activada, permite a usuarios locales ganar privilegios a trav\u00e9s de c\u00f3digo manipulado."}], "lastModified": "2024-11-21T00:34:05.940", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec:client_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E45E229-0B88-43A6-9888-054520F87EA0", "versionEndIncluding": "3.0"}, {"criteria": "cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DDD0E02-306D-4675-B73A-2C2F619CDDCF"}, {"criteria": "cpe:2.3:a:symantec:client_security:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5324D40A-76EA-4CC4-A1B1-971069A4E161"}, {"criteria": "cpe:2.3:a:symantec:norton_antivirus:*:*:corporate:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34A605C6-2412-469D-BCF3-518BEAD90579", "versionEndIncluding": "10.1"}, {"criteria": "cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9E85FD6-9E89-4497-854C-60A20639CE52"}, {"criteria": "cpe:2.3:a:symantec:norton_antivirus:10.0:*:corporate:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAC5389A-8B18-40C4-A3E0-E50B6AA724FC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}