CVE-2007-0436
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-0436
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching an Explorer window in response to a help command, which allows local users to gain LocalSystem privileges via interactive use of Explorer.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
X-Kryptor Secure Client本地权限提升漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
X-Kryptor Secure Client是基于软件的VPN客户端，允许将家庭或移动的工作机连接到安全的局域网。 X-Kryptor Secure Client在处理认证操作时存在漏洞，本地攻击者可能利用此漏洞获取非授权访问。 如果在Microsoft Windows上使用X-Kryptor Secure Client的话，在某些环境下本地用户可能获得权限提升。当对用户提示RSA凭据时，用户可以按下F1键获得应用程序帮助。这时X-Kryptor客户端没有提供帮助文件，并提供给用户一个资源管理器窗口要用
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-0436
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-0436
请登录查看更多情报信息。
- http://jvn.jp/niscc/NISCC-462660/index.htmlx_refsource_MISC
- http://www.barronmccann.com/ISec/s2pressrelease.asp?PRID=141&S2ID=14x_refsource_CONFIRM
- http://www.bemacpromotions.com/files/xkpatch462660.zipx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2007-0436
Same Patch Batch · n/a · 2007-02-04 · 13 CVEs total
| CVE-2006-6966 | phpGraphy PHP代码执行漏洞 | |
| CVE-2007-0699 | Guernion Sylvain Portail Web Php 'includes/includes.php' PHP远程文件包含漏洞 | |
| CVE-2007-0700 | Guernion Sylvain Portail Web Php 'index.php'目录遍历漏洞 | |
| CVE-2007-0701 | Epistemon 'inc/common.inc.php'PHP 远程文件包含漏洞 | |
| CVE-2007-0702 | PHPEventMan 多个PHP远程文件包含漏洞 | |
| CVE-2007-0703 | WebBuilder 'library/StageLoader.php'PHP远程文件包含漏洞 | |
| CVE-2007-0704 | Somery 'install.php'PHP远程文件包含漏洞 | |
| CVE-2007-0705 | Sleipnir 跨域脚本攻击漏洞 | |
| CVE-2007-0706 | Internet Explorer 多个跨域脚本攻击漏洞 | |
| CVE-2007-0707 | GOM Player栈缓冲区溢出漏洞 | |
| CVE-2007-0708 | Comodo防火墙cmdmon.sys驱动多个本地拒绝服务漏洞 | |
| CVE-2007-0709 | Comodo防火墙cmdmon.sys驱动多个本地拒绝服务漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2007-0436
No comments yet