« Volver al listado

CVE-2007-0436

Estado: ModificadaMedia (4.6)—

Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Barron Mccann — InstallBarron Mccann — X-kryptor DriverBarron Mccann — X-kryptor Secure ClientBarron Mccann — Xgntr

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0436",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-02-04T00:28:00.000",
  "references": [
    {
      "url": "http://jvn.jp/niscc/NISCC-462660/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/33110",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24045",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.barronmccann.com/ISec/s2pressrelease.asp?PRID=141&S2ID=14",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.bemacpromotions.com/files/xkpatch462660.zip",
      "tags": [
        "URL Repurposed"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cpni.gov.uk/Products/advisories/default.aspx?id=al-20070129-0107.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx?id=va-20070129-0107.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22424",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0496",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/niscc/NISCC-462660/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/33110",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/24045",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.barronmccann.com/ISec/s2pressrelease.asp?PRID=141&S2ID=14",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.bemacpromotions.com/files/xkpatch462660.zip",
      "tags": [
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cpni.gov.uk/Products/advisories/default.aspx?id=al-20070129-0107.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cpni.gov.uk/Products/vulnerabilitydisclosures/default.aspx?id=va-20070129-0107.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22424",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0496",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer."
    },
    {
      "lang": "es",
      "value": "Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) en X-Kryptor Secure Client, no pierde privilegios al activar una ventana del Explorador en respuesta a un comando help, lo que permite a usuarios locales alcanzar privilegios de LocalSystem por medio del uso interactivo del Explorador."
    }
  ],
  "lastModified": "2026-06-16T22:35:33.987",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:barron_mccann:install:bms1472:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8D587C2-D33F-45F9-8B97-4961996CC51A"
            },
            {
              "criteria": "cpe:2.3:a:barron_mccann:x-kryptor_driver:bms1446hrr:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "744CD005-5554-47AC-824A-A88B3AE19A64"
            },
            {
              "criteria": "cpe:2.3:a:barron_mccann:x-kryptor_secure_client:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96C4C70C-D64A-4261-AE46-0EF10084CC2C"
            },
            {
              "criteria": "cpe:2.3:a:barron_mccann:xgntr:bms1351:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A375DF0A-4A84-4D11-B0DE-9C5B7C665E19"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}