CVE-2010-2308

ALTO 7.2CVE-2010-2308 · Published 16/06/2010 · updated 16/06/2026

En resumen

CVE-2010-2308 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a anti-virus (sophos).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
anti-virus sophos	`= 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86= 3.90= 3.91= 3.95= 3.96.0= 4.03= 4.04= 4.05= 4.33.0= 4.5.11= 4.5.12= 4.5.3= 4.5.4= 4.7.1= 4.7.2= 5.0.1= 5.0.2= 5.0.4= 5.0.9= 5.1= 5.2= 5.2.1= 6.0.4= 6.5= 7.0= 7.0.5= 7.6= 7.6.14= 7.6.15= 7.6.16= 7.6.17= 7.6.18≤ 7.6.19`	No fix yet

Description

Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.

References

dvlabs.tippingpoint.com/advisory/TPTI-10-03
secunia.com/advisories/40085 · Vendor Advisory
securityfocus.com/archive/1/511773/100/0/threaded
securitytracker.com/id
sophos.com/support/knowledgebase/article/111126.html · Vendor Advisory
vupen.com/english/advisories/2010/1412 · Vendor Advisory

Más vulnerabilidades de anti-virus

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

anti-virus

sophos

= 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86= 3.90= 3.91= 3.95= 3.96.0= 4.03= 4.04= 4.05= 4.33.0= 4.5.11= 4.5.12= 4.5.3= 4.5.4= 4.7.1= 4.7.2= 5.0.1= 5.0.2= 5.0.4= 5.0.9= 5.1= 5.2= 5.2.1= 6.0.4= 6.5= 7.0= 7.0.5= 7.6= 7.6.14= 7.6.15= 7.6.16= 7.6.17= 7.6.18≤ 7.6.19

No fix yet

Más vulnerabilidades de anti-virus

Ver todo →