CVE-2007-2965: f-secure f-secure_anti-virus
Vulnerability summary
CVE-2007-2965 is a high (CVSS 7.2) vulnerability in f-secure f-secure_anti-virus. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27.4% of scored vulnerabilities.
Timeline
- 31-05-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via a crafted I/O request packet (IRP), related to IOCTL (Input/Output Control) and "access validation of the address space."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.35%
Chance of exploitation in the next 30 days
Percentile
27%
Versus all other CVEs
30-day change
0.00 pp
From 0.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
F-secure7 products
- f-secure_anti-virus≤ 4.65 | ≤ 5.42 | ≤ 5.44 | ≤ 5.52 | ≤ 5.61 | ≤ 6.40 | 2005 | 2006 | 2007
- f-secure_anti-virus_client_security≤ 6.03
- f-secure_anti-virus_linux_client_security≤ 5.30
- f-secure_anti-virus_linux_server_security≤ 5.30
- f-secure_internet_security2005 | 2006 | 2007
1 vendor · 7 products