CVE-2007-0436

MEDIUM 4.6CVE-2007-0436 · Published 04/02/2007 · updated 16/06/2026

In short

CVE-2007-0436 is a MEDIUM (CVSS 4.6) vulnerability affecting install (barron mccann), x-kryptor driver (barron mccann), xgntr (barron mccann).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
install barron_mccann	`= bms1472`	No fix yet
x-kryptor driver barron_mccann	`= bms1446hrr`	No fix yet
xgntr barron_mccann	`= bms1351`	No fix yet

Description

Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.

References

jvn.jp/niscc/NISCC-462660/index.html
osvdb.org/33110
secunia.com/advisories/24045 · Vendor Advisory
barronmccann.com/ISec/s2pressrelease.asp
bemacpromotions.com/files/xkpatch462660.zip · URL Repurposed
cpni.gov.uk/Products/advisories/default.aspx
cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx
securityfocus.com/bid/22424
vupen.com/english/advisories/2007/0496 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free