CVE-2007-0436

MEDIO 4.6CVE-2007-0436 · Published 04/02/2007 · updated 16/06/2026

In breve

CVE-2007-0436 è una vulnerabilità MEDIO (CVSS 4.6) che riguarda install (barron mccann), x-kryptor driver (barron mccann), xgntr (barron mccann).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.36%, superiore al 29.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
install barron_mccann	`= bms1472`	No fix yet
x-kryptor driver barron_mccann	`= bms1446hrr`	No fix yet
xgntr barron_mccann	`= bms1351`	No fix yet

Description

Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.

References

jvn.jp/niscc/NISCC-462660/index.html
osvdb.org/33110
secunia.com/advisories/24045 · Vendor Advisory
barronmccann.com/ISec/s2pressrelease.asp
bemacpromotions.com/files/xkpatch462660.zip · URL Repurposed
cpni.gov.uk/Products/advisories/default.aspx
cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx
securityfocus.com/bid/22424
vupen.com/english/advisories/2007/0496 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free