CVE-2007-1227

VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands.

CVSS v2.0

6.6 MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C

EPSS

0.76% chance of exploitation in the next 30 days, 53th percentile

Published

2007-03-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/461485/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3386

References

• CVE Record
• NVD entry

Related

• CVE-2007-1226
• CVE-2007-1229
• CVE-2007-1225
• CVE-2007-1230
• CVE-2007-1224
• CVE-2007-1231