CVE - CVE-2007-2152

CVE-ID
CVE-2007-2152	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execute arbitrary code via a long filename containing multi-byte (Unicode) characters.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
IDEFENSE:20070417 McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=515 CONFIRM:https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=612750&command=show&forward=nonthreadedKC CERT-VN:VU#324929 URL:http://www.kb.cert.org/vuls/id/324929 BID:23543 URL:http://www.securityfocus.com/bid/23543 VUPEN:ADV-2007-1435 URL:http://www.vupen.com/english/advisories/2007/1435 SECTRACK:1017928 URL:http://www.securitytracker.com/id?1017928 SECUNIA:24914 URL:http://secunia.com/advisories/24914 XF:mcafee-onaccess-bo(33732) URL:http://xforce.iss.net/xforce/xfdb/33732
Date Entry Created
20070419	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070419)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2007-2152