CVE:CVE-2007-2965
CNNVD:CNNVD-200705-586
多个F-Secure产品，包括Internet Security 2005,2006和2007；Anti-Virus 2005, 2006和2007以及基于Consumers 6.40及之前版本的F-Secure保护服务的Solutions中的Real-time扫描组件存在未明漏洞。本地用户可以借助一个特制的I/O请求信息包(IRP)，获得特权。此漏洞与IOCTL(Input/Output Control)和"访问对地址空间的验证"有关。
solution:Upgrade f-secure f-secure_anti-virus to a higher version than 4.65,5.42,5.44,5.52,5.61,6.40,2005,2006,2007,and avoid the version (,4.65],(,5.42],(,5.44],(,5.52],(,5.61],(,6.40],2005,2006,2007; Upgrade f-secure f-secure_anti-virus_client_security to a higher version than 6.03,and avoid the version (,6.03]; Upgrade f-secure f-secure_anti-virus_linux_client_security to a higher version than 5.30,and avoid the version (,5.30]; Upgrade f-secure f-secure_anti-virus_linux_server_security to a higher version than 5.30,and avoid the version (,5.30]; Upgrade f-secure f-secure_internet_security to a higher version than 2005,2006,2007,and avoid the version 2005,2006,2007; Upgrade f-secure f-secure_protection_service to a higher version than 6.40,and avoid the version (,6.40]; Upgrade f-secure internet_gatekeeper to a higher version than 2.16,6.60,and avoid the version (,2.16],(,6.60]